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FOREWORD 


This  report  describes  the  work  accomplished  in  an  investi¬ 
gation  of  crew  escape  criteria  for  manned  recoverable  launch 
vehicles  by  General  Eynamics/Astronautics,  San  Diego,  California, 
under  Air  Force  Contract  Number  AF  33(6l5)-l536.  The  program  was 
conducted  between  10  May  196U  and  1  September  1961>  for  the 
Recovery  and  Crew  Station  Branch  of  the  Air  Force  Flight  Dynamics 
Laboratory,  Research  and  Technology  Division,  Air  Force  Systems 
command.  United  States  Air  Force,  Wright-Patterson  Air  Force 
Base,  Ohio.  Mr.  J.  il.  Peters  was  the  program  monitor  for  the 
Laboratory. 

The  objective  of  the  program  was  to  investigate,  define, 
and  evaluate  the  unique  problems  involved  in  the  initiation  and 
separation  phases  of  escape  for  two  stage  manned,  recoverable 
launch  systems  having  separated  crew  compartments.  This  is  a 
part  of  a  continuing  effort  to  obtain. escape  systems  design 
criteria  under  Project  1362,  "Crew  Escape  for  Flight  Vehicles", 
and  Task  136203,  "Aeronautical  Crew  Escape  Techniques". 

General  Dynamics/Astronautics  Project  Leader  was  Mr.  C.  J. 
Cohan.  Other  key  .  stronautics  personnel  assigned  to  the  project 
were  Mr.  C.  G.  Place,  trajectory  analyses.  Hr.  G.  T.  Webster, 
design  and  hazards,  and  Mr.  F.  Wendzel,  detection  and  initiation. 
The  contractor's  report  number  is  GD/A-DCB-6U-07 2 . 

Publication  of  this  report  does  not  constitute  Air  Force 
approval  of  the  report's  findings  or  conclusions.  It  is  published 
only  for  the  exchange  and  stimulation  qf^ ideas.  ^  , 

-  THERON  Jr^AlEA 

Asst,  for  Research  &  Technology 
Vehicle  Equipment  Division 
AF  Flight  I)ynamics  Laboratory 
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Previous  studies  have  Investigated  escape  from  \erospace  vehicles 
in  the  general  aspects  of  escape  concepts,  configurations,  systems  and  per- 
lormance  for  single  crev  compartments .  At  hand  16  the  concept  of  two  stage  manned 
recoverable  aerospace  vehicles  with  a  crew  compartment  In  each  stage.  In  this 
study  the  detection.  Initiation  and  separation  phases  of  escape  were  investigated 
to  determine  the  unique  problems,  if  any,  in  these  phases  resulting  from  the 
presence  of  two  separated  craw  compartments.  Possible  two  stage  manned  aerospace 
veuicles  were  classified  as  to  configuration  and  mission.  The  basic  mission  was 
an  orbital  mission,  and  the  basic  configuration  classes  were  vertical  take-off 
and  landing  (VTOHL)  and  horizontal  take-off  and  landing  (KTOL).  Generalized 
hazards  analysis  studies  were  made  for  each  configuration  class  considering  system 
hazaids  and  mission  effects.  It  was  determined  that  craw  escape  requirements 
existed  at  any  time  In  the  mission.  Escape  concepts  ranging  from  ejection  seats 
to  fully  recoverable  capsules  were  reviewed  for  applicability  to  the  present 
problem  with  the  fully  recoverable  capsule  being  selected.  No  unique  problems 
were  found  in  the  area  of  sensors  required  for  the  detection  task.  A  combination 
manual/ automatic  escape  initiation  system  was  selected  as  the  most  promising  for 
Liiese  advanced  coucept  vehicles.  A  cockpit  malfunction  status  display  and  emergency 
control  console  was  conceptually  designed.*  This  system,  called  the  Malfunction 
Warning  Display',  would  be  in  ea$h  compartment  and  prior  to  staging  each  compart¬ 
ment  would  monitor  boost  performance,  making  the  most  use  of  the  flexibility  and 
decision  making  capability  of  the  men  in  each  crew  compel tment.  Guidelines  for 
jurisdiction  (authority  to  command  an  ejection)  and  precedence  (priority  or  order  of 
jurisdiction)  have  been  established.  Separation  trajectory  characteristics  were 
investigated  leading  to  the  establishment  of  crew  compartment  location  and 
ejection  sequencing  criteria.  The  conclusion  of  this  study  is  that  there  are  nc 
diiiicult  problems  associated  with  crew  escape  for  two  separated  crew  compartments. 
The  unique  problems  which  might  be  better  classed  as  unique  considerations  for  two 
crew  compartment  escape  are  the  distribution  of  the  sensed  malfunction  information, 
the  Jurisdiction  ana  precedence  of  escape  initiation,  and  the  location  and 
sequencing  characteristics. 
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SECTION  1 


INTRODUCTION 

Previous  Air  Force  studies  haw  investigated  escape  in  the  general  aspects  cf 
escape  concepts,  configurations,  systems  and  performance  for  aerospace  vehicles 
having  i.  single  crew  compartment.  Present  aerospace  vehicle  studies  are  consider¬ 
ing  two  stage  vehicles  in  which  each  stage  has  a  crew  or  manned  payload. 

It  was  the  purpose  of  the  present  study  to  investigate  this  new  situa¬ 
tion  to  determine  if  there  are  any  unique  problems  involved  in  the  initiation  and 
separation  phases  of  escape  resulting  from  the  fact  that  there  are  two  separated 
manned  compartments.  The  investigation  consisted  of  four  main  tasks  as  follows: 

1.  Definition  and  classification  of  the  types  of  manned 
aerospace  vehicles  and  missions  to  he  considered. 

2.  Determination  of  hazards  and  conditions  requiring  es¬ 
cape  . 

3-  Determination  of  those  problems  of  detection,  initia¬ 
tion,  separation  and  escape  concepts  which  are  unique 
due  tc  the  piesence  of  two  separated  crew  compartments. 

h.  Evaluation  of  proposed  solutions  to  any  discovered 
problems . 

The  nature  of  the  study  was  such  thac  it  drew  heavily  on  information 
determined  in  previous  one  stage  aerospace  vehicle  escape  studies  such  as  those 
documented  in  References  1  through  cj. 

The  study  was  conducted  in  such  a  manner  tliat  the  results  described 
herein  are  general  criteria  rather  than  criteria  limited  tc  specific  designs  and 
should  therefore  serve  as  a  guide  for  escape  analysis  of  any  two  stage  manned 
J-le. 
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SECTION  2 

CONFIGURATION  AND  MISSION  DEFINITION 

The  first  step  in  the  investigation  was  the  definition  and  classification  of 
manned  two  stage  vehicles  according  to  configuration  and  performance.  It  was  the 
purpose  of  this  phase  of  the  study  to  reduce  the  large  number  of  possible  configura¬ 
tions  and  missions  to  representative  ones  on  which  to  base  the  primary  escape  in¬ 
vestigation.  In  performing  this  phase  a  large  number  of  proposed  configurations 
and  missions  were  reviewed.  Information  was  obtained  from  government  studies ,  trade 
.journals  and  contractor  in-house  studies.  In  order  to  present  the  study  results  in 
an  unclassified  report  the  specific  configurations  and  missions  which  were  reviewed 
are  not  presented. 

2 . 1  CONFIGURATION  DEFI NITION 

The  vehicles  which  were  reviewed  in  this  phase  of  the  study  were  two  stage,  manned 
recoverable  vehicles  having  two  separate  crew  compartments.  For  the  investigation, 
each  stage  was  assumed  to  have  a  three -man  crew,  however,  the  number  of  crew  mem¬ 
bers  could  vary  from  one  to  five  for  each  stage  without  affecting  the  results  of 
this  study.  Crew  escape  techniques  for  more  than  five  persons  would  probably  im¬ 
pose  such  large  weight  and  structural  restrictions  that  the  escape  technique  would 
be  complete  vehicle  recovery.  Two  stage  recoverable  aerospace  vehicles  can  be  re¬ 
duced  to  two  basic  configuration  classes.  These  are  the  Vertical  Take-Off,  Hori¬ 
zontal  Landing  (VTOHL)  and  the  Horizontal  Take-Off,  Horizontal  Landing  (HTOL)  ve¬ 
hicles. 

2.1.1  VERTICAL  TAKE-OFF,  HORIZONTAL  LANDING  (VTOHL).  The  VTOHL  vehicle  class 

is  one  in  which  vehicle  recovery  provisions  for  each  stage  are  added  to  the  basic  body 
of  revolution.  These  recovery  provisions  can  range  from  fixed  wings  to  .parachutes . 

The  mode  of  recovery  has  little  effect  on  the  escape  considerations  involved  in  this 
study.  A  fixed  wing  recovery  system  was  selected  for  the  nominal  VTOHL  configura¬ 
tion  of  this  study. 

VTOHL  vehicles  can  be  further  classified  as  to  propulsion  mode.  The  boost 
propulsion  system  can  be  either  liquid  or  solid  rockets  or  a  combination  in  which 
the  main  propulsion  mode  is  a  liquid  rocket  and  solid  rockets  are  used  for  addi¬ 
tional  thrust.  Both  liquid  and  solid  rockets  can  be  further  classified  by  propel¬ 
lant  type.  In  addition  to  the  boost  propulsion  mode,  turbojet  engines  are  generally 
required  for  flyback  and  landing.  Figure  1  presents  a  sketch  of  a  typical  VTOHL  ve¬ 
hicle  using  liquid  oxygen- liquid  hydrogen  propellant.  Also  shown  in  Figure  1  is  a 
typical  propellant  weight  breakdown  for  both  stages. 

An  additional  classification  of  VTOHL  vehicles  and  one  that  is  of  partic¬ 
ular  significance  to  escape  involves  the  relative  location  of  the  two  stages.  The 
two  basic  arrangements  are  tandem  and  parallel  and  are  indicated  in  Figure  2.  The 
tandem  arrangement  is  considered  the  most  likely  for  the  vertical  boosted  vehicle. 

The  parallel  mounted  arrangement  Imposes  the  Siost  severe  requirement  on  the  sequenc¬ 
ing  of  the  escape  capsule  jettisoning  because  of  the  proximity  of  the  crew  capsules. 

2.1.2  HORIZONTAL  TAKE-OFF  AND  LANDING  (HTOL).  The  basic  HTOL  configuration  is 
one  in  which  the  first  stage  is  a  winged  vehicle.  The  second  stage  is  recoverable 
and  can  either  be  a  winged  body  vehicle  or  a  lifting  body  vehicle.  For  the  scope 
of  this  study  the  type  of  second  stage  is  not  significant. 


GTOW 

Performance  Oxidizer 
Return  Propellant 
Performance  Fuel 
Residual  Oxidizer 
Residual  Fuel 
Stage  Wt.  -  Dry 
Number  of  Crev 


Stage  1  -  Wt.  -  lbs. 

Total 

1,573,300 

426,700 

2,000,000 

1,091,000 

260,000 

1,351,000 

47,500 

5,400 

52,900 

143,000 

37,600 

160,600 

5,500 

4,400 

9,900 

1,000 

800 

1,800 

285,300 

118,500 

403,800 

3 

3 

6 
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Figure  2.  VTOHL  STAGE  ARRANGEMENTS 
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A6  with  the  VTOHL  it  Is  also  possible  to  classify  HTOL  vehicles  as  to 
propulsion  mode  and  propellant.  In  general,  second  stage  vehicles  which  are 
presently  envisioned  use  liquid  rocket  propulsion  with  liquid  oxygen  as  the 
oxidizer  and  liquid  hydrogen  as  the  fuel.  There  are  a  number  of  possibilities 
in  regard  to  the  first  stage.  The  first  stage  propulsion  can  be  rocket,  turbojet, 
ramjet  or  various  combinations  of  these.  The  most  probable  fuels  are  JP,  HP  and 
liquid  hydrogen.  For  first  stage  rockets,  liquid  oxygen  is  the  most  likely  oxi¬ 
dizer.  There  are  two  variations  to  these  propulsion  mode,  propellant  types.  The 
first  of  these  involves  the  use  of  a  sled  for  take-off.  This  arrangement  reduces 
the  on-board  propellant  requirements.  The  second  variation  is  the  air  collection 
vehicle  in  which  all  or  a  portion  of  the  oxidizer  for  the  rockets  is  collected 
during  the  flight . 

Figure  3  presents  a  sketch  of  a  typical  HTOL  vehicle  using  rockets  in 
each  stage.  The  first  stage  is  assumed  to  use  liquid  oxygen  and  KP-1  and  the 
second  stage  liquid  oxygen  and  liquid  hydrogen.  A  typical  propellant  weight 
breakdown  for  each  stage  is  also  indicated  in  Figure  3* 

The  three  most  practical  arrangements  for  the  two  stages  of  a  HTOL  ve¬ 
hicle  are  indicated  schematically  in  Figure  4.  The  two  basic  types  are  tandem 
and  parallel.  In  the  parallel  arrangement  the  second  stage  can  be  mounted  either 
on  top  or  on  the  bottom.  The  tandem  arrangement  is  considered  unlikely  due  to 
severe  structural  penalties  involved  in  mounting  the  second  stage.  The  penalties 
of  tandem  staging  are  generally  more  severe  for  a  HTOL  than  a  VTHOL  due  to  the  fact 
that  in  most  cases  the  HTOL  vehicle  flies  a  higher  dyz^unic  pressure  trajectory. 

The  upper  mounted  configuration  is  considered  the  most  likely  for  the  horizontal 
take-off  vehicle,  as  this  arrangement  affords  crew  protection  through  all  regions 
of  the  flight  envelope.  The  lower  mounted  arrangement  assumes  a  high  risk  for  the 
second  stage  crew  during  any  flight  phases  where  the  vehicle  operates  near  the 
ground,  e.g.  take-off  and  landing. 

2.1.3  CONFIGURATION  SUMMARY.  As  can  be  seen  from  the  above  discussion  there  are 
a  vast  number  of  possible  combinations  of  geometric  configuration,  propulsion  mode, 
propellants  and  stage  location.  In  view  of  this,  it  is  significant  to  note  the 
problem  at  band  which  is  that  of  crew  escape  and  the  relationship  of  the  various 
configuration  parameters  to  this  problem. 

The  geometric  configuration  is  important  since  it  affects  crew  location 
and,  in  the  case  of  VTOHL  versus  HTOL,  the  orientation  of  escape  separation.  Ex¬ 
cept  for  these  effects,  the  geometric  configuration  has  little  or  no  effect  on  crew 
escape . 


The  propulsion  mode  is  significant  primarily  through  its  effect  on  the  es¬ 
cape  environment  or  trajectory  time  history.  There  is  a  secondary  effect  related  to 
possible  hazards  by  the  relative  reliability  of  the  various  propulsion  modes. 

The  propellants  are  quite  significant  since  by  their  very  nature  they  in¬ 
troduce  a  severe  hazard,  the  possibility  of  explosion. 

The  stage  location  is  related  to  escape  since  it  affects  the  separation 
trajectory  considerations  and  also  has  a  small  effect  on  available  warning  time. 

Sections  5  and  6  which  discuss  escape  concepts  and  escape  procedure  will 
note  the  significance  of  these  configuration  parameters  in  any  applicable  areas. 
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each  stage.  The  first  stage  is  assumed  to  use  liquid  oxygen  and  HP-1  and  the 
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severe  structural  penalties  involved  in  mounting  the  second  stage.  The  penalties 
of  tandem  staging  are  generally  more  severe  for  a  HTOL  than  a  VTHOL  due  to  the  fact 
that  in  most  cases  the  HTOL  vehicle  flies  a  higher  dynamic  pressure  trajectory. 

The  upper  mounted  configuration  is  considered  the  most  likely  for  the  horizontal 
take-off  vehicle,  as  this  arrangement  affords  crew  protection  through  all  regions 
of  the  flight  envelope.  The  lower  mounted  arrangement  assumes  a  high  risk  for  the 
second  stage  crew  during  any  flight  phases  where  the  vehicle  operates  near  the 
ground,  e.g.  take-off  and  landing. 

2.1.3  CONFIGURATION  SUMMARY.  As  can  be  seen  from  the  above  discussion  there  are 
a  vast  number  of  possible  combinations  of  geometric  configuration,  propulsion  mode, 
propellants  and  stag*’  location.  In  view  of  this.  It  is  significant  to  note  the 
problem  at  hand  which  is  that  of  crew  escape  and  the  relationship  of  the  various 
configuration  parameters  to  this  problem. 

The  geometric  configuration  is  important  since  it  affects  crew  location 
and,  in  the  case  of  VTOHL  versus  HTOL,  the  orientation  of  escape  separation.  Ex¬ 
cept  for  these  effects,  the  geometric  configuration  has  little  or  no  effect  on  crew 
escape . 


The  propulsion  mode  is  significant  primarily  through  its  effect  on  the  es¬ 
cape  environment  or  trajectory  time  history.  There  is  a  secondary  effect  related  to 
possible  hazards  by  the  relative  reliability  of  the  various  propulsion  modes. 

The  propellants  are  quite  significant  since  by  their  very  nature  they  in¬ 
troduce  a  severe  hazard,  the  possibility  of  explosion. 

% 

The  stage  location  is  related  to  escape  since  it  affects  the  separation 
trajectory  considerations  and  also  has  a  small  effect  on  available  warning  time. 

Sections  5  and.  6  which  discuss  escape  concepts  and  escape  procedure  will 
note  the  significance  of  these  configuration  parameters  in  any  applicable  areas. 
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HTOL  Stage  1  -  Wt.  -  lbs. 

Stage  2  -  Wt.  -  lbs. 

Total 

GTOW  (It) 

1,182,000 

348,000 

1,530,000 

Performance  Oxidizer  (LO2) 

672,000 

235,500 

907,500 

Performance  Fuel 

300,000(RP) 

33,700(LH2) 

333,700 

Return  Propellant  (JP) 

18,000 

1,200 

19,200 

Residual  Oxidizer  (LO2) 

11,500 

4,000 

15,500 

Residual  Fuel 

8,500(RP) 

i,6oo(lha) 

10,100 

Stage  Wt.  -  Dry 

172,000 

72,000 

244,000 

Number  of  Crew 

3 

3 

6 

SLED 

Weight  (lncl.H-1  Rocket) 

150,000  lb. 

Liquid  Oxygen 

131,000 

RF-1 

59,000 

Carried  Wt. 

1,530,000 

Total  Weight 

1,870,000 

Take-Off  Speed 

400  kts. 

Crev  Compartments 


Figure  3.  TYPICAL  HTOL  CONFIGURATION  WITH  PROPELLANT  WEIGHT  BREAKDOWN 
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Figure  HTOL  STAGE  ARRANGEMENTS 
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MISSION  DEFINITION 


An  ^orbital  mission  was  selected  as  the  nominal  mission  for  this  study.  Since  the 
study  is  directed  towards  those  problems  which  are  unique  to  providing  escape  for 
two  separated  crew  compartments,  only  those  phases  of  the  mission  wherein  the  two 
stages  are  together  are  analyzed. 

Although  sub-orbital  and  super-orbital  missions  are  envisioned  for  future 
two  stage  vehicles,  the  orbital  mission  includes  those  regimes  of  sub-orbital  and 
super-orbital  missions  where  the  two  vehicles  are  together  and  therefore,  the  re¬ 
sults  should  be  valid  for  the  other  missions. 

As  indicated  above,  the  present  study  was  concerned  only  with  those  flight 
regimes  in  which  the  two  stages  are  together.  In  addition  to  boost  this  introduces 
the  aspect,  of  non-escape  mission  abort.  There  are  two  possibilities  for  such  an 
abort.  The  vehicle  may  return  and  land  without  staging  or  the  vehicle  may  stage 
and  each  stage  re  lm  and  land  separately.  The  method  chosen  depends  on  the  design 
criteria  of  the  particular  vehicle  being  considered,  since  a  weight  penalty  is  in¬ 
troduced  if  provisions  are  made  for  landing  an  unstaged  vehicle.  The  present  study 
would  be  concerned  only  with  abort  trajectories  of  unstaged  configurations. 

The  trajectory  characteristics  are  significant  since  they  determine  the 
escape  environment.  Abort  trajectories  may  or  may  not  be  more  severe  than  boost 
trajectories,  depending  upon  abort  point  and  configuration.  Since  abort  trajec¬ 
tories  differ  only  in  degree  of  environment  severity  and  not  in  basic  character¬ 
istics,  the  trajectory  analyses  phase  for  the  present  study  was  limited  primarily 
to  boost  trajectories.  This  assumption  would  affect  the  escape  corridor  definition 
only  for  those  unstaged  abort  trajectories  which  would  exceed  the  most  severe  boost 
trajectory.  For  any  specific  design  study  involving  abort  with  an  unstaged  vehicle 
the  flight  corridor  would  of  course  have  to  include  the  abort  trajectory. 

A  survey  of  typical  manned  two  stage  vehicle  missions  was  made  to  determine 
their  various  boost  trajectory  characteristics.  Trajectory  characteristics  of  the 
following  types  of  vehicles  were  considered: 

1)  HTOL-Horizontal  take-off  and  landing  (airbreathing) 

2)  HTOL-Horizontal  take-off  and  landing  (rocket) 

3)  VTOHL- Vertical  take-off-horizontal  landing  (rocket) 

The  objective,  in  terms  of  crew  escape,  was  to  determine  a  corridor  of  possible 
escape  points.  The  corridor  was  utilized  In  conducting  an  investigation  of  vehicle 
characteristics  during  separation  at  various  atmospheric  conditions. 

Figure  5  is  the  selected  escape  performance  envelope.  It  is  a  flight 
corridor  which  bounds  the  vehicle  missions  investigated  and  is  the  region  of  in¬ 
terest  for  escape  in  the  present  study.  The  envelope  has  been  divided  into  re¬ 
gions  applicable  to  rocket  boosters  and  regions  applicable  to  airbreathing  ve¬ 
hicles.  The  division  indicated  in  Figure  5  is  of  course  not  absolute  but  quali¬ 
tative.  This  information  in  conjunction  with  the  angle  of  attack  and  flight  path 
angle  characteristics  served  as  input  to  the  investigation  of  separation  trajec¬ 
tory  characteristics  which  are  discussed  In  Section  6. 

Figures  6  and  7  present  typical  trajectory  characteristics  for  VTOHL  and 
HTOL  vehicle b  respectively. 


8 


2W)i 


Typical  Boost  Trajectory  for  2  Stage  Recoverable  FCOHL  Vehicle 
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SECTION  3 

ESCAPE  REQUIREMENTS  AND  CRITERIA 


Safety  of  the  crew  of  any  manned,  aerospace  vehicle  is  of  prime  importance  to  both 
the  crew  and  the  success  of  the  program.  Until  such  time  that  actual  flight  ex¬ 
perience  has  established  a  high  reliability  for  successful  mission  completion,  a 
means  for  crew  escape  and  recovery  must  be  provided.  The  present  study  was  con¬ 
cerned  ^dth  the  crew  escape  provisions  for  the  two  stage  manned  vehicles  discussed 
in  Section  2.  The  following  criteria  were  applied  to  the  investigation. 

3.1  Each  stage  carries  a  nominal  crew  of  3  men.  It  was  found,  however,  that 
the  results  of  the  study  are  applicable  to  other  crew  compartments  containing  from 
two  to  five  men.  For  crews  greater  than  5  men,  the  size  of  the  escape  vehicle  be¬ 
comes  prohibitive.  In  the  same  vein,  escape  system  for  passenger  carrying  vehicles 
would  impose  large  weight  and  structural  increases  which  in  turn  would  restrict  the 
overall  capability  of  the  vehicle,  therefore  the  vehicle  itself  would  be  the  escape 
system. 

3.2  Crew  escape  techniques  shall  be  capable  of  providing  successful  escape 
throughout  the  mission  profile  of  both  stages  as  presented  in  Section  2.  This  re¬ 
quires  that  any  escape  procedure  for  a  two  stage  separated  crew  compartment  vehicle 
operate  both  in  the  staged  and  unstaged  configuration. 

3.3  Escape  concepts  shall  perform  within  the  state-of-the-art  of  human  tolerance 
limits  on  acceleration  as  set  forth  by  Figure  8  suad  the  limits  on  tumbling,  tempera¬ 
ture,  vibration  and  radiation  such  as  presented  in  Reference  5>  to  place  the  crew 

in  a  condition  to  accomplish  action  to  service  and  aid  in  their  location  and  rescue. 

3.4  Crew  compartment  location  and  separation  characteristics  shall  exist  such 
that  clearance  during  escape  is  assured  for  all  conditions. 
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SECTION  4 
HAZARDS  ANALYSIS 

Having  assumed  the  requirement  for  escape  capability,  it  is  necessary  to  investi¬ 
gate  the  vehicle  system  and  mission  in  order  to  determine  those  events  which  dic¬ 
tate  crew  escape  and  their  location  in  the  mission  time  history. 

The  many  different  emergencies  which  might  arise  during  a  two  stage  space 
launch  boost  are  too  numerous  to  mention  and  impossible  tc  pre -determine •  The 
approach  taken  in  this  study  for  the  hazards  analysis  was  to  divide  the  vehicle 
mission  profile  into  functional  stages,  and  then  describe  and  discuss  the  major 
operations  which  take  place  during  a  particular  functional  stage. 

The  end  result  of  a  crew  protection  system  is  to  provide  the  highest 
degree  of  safety  for  all  crev  raembers  without  imposing  too  stringent  restrictions 
on  the  vehicle  mission.  For  this  study,  the  primary  objective  was  to  determine 
what  unique  problems,  if  any,  are  present  for  crew  escape  systems  on  two-stage 
manned  recoverable  vehicles.  This  me one  that  both  stages  are  manned,  the  first 
stage  is  a  sub-orbital  booster  and  the  second  stage  the  orbital  vehicle.  The 
period  in  which  the  two  stages  are  mated,  from  pre-launch  and  count-down  until 
actual  separation  of  the  second  stage,  is  covered  by  this  study. 

A  general  vehicle  systems  hazards  analyses  was  mede .  The  results  of 
this  investigation  were  combined  with  typical  VTOHL  and  HTOL  missions  to  provide 
tables  of  potential  hazards  for  each  of  these  vehicle  classifications. 

It  should  be  noted,  however,  that  for  any  specific  design,  it  would  be 
necessary  to  sake  a  detailed  hazards  analysis  including  reliability  characteris¬ 
tics.  This  would  bs  required  in  order  to  insure  reliable  design  and  provide  the 
information  necessary  for  selection  of  escape  concepts  and  parameters  to  be 
sensed  by  any  malfunction  detection  system. 

Critical  escape  areas  have  been  defined  on  the  basis  of  the  hazards 
analysis.  Also  an  investigation  of  explosion  characteristics  was  nede  since  ex¬ 
plosions,  in  general,  are  the  most  severe  'nazard  for  the  reasons  that  they  have 
the  most  rapid  onset  time  and  affect  a  large  environmental  area. 

4.1  VEHICLE  SYSTEM  HAZARDS 

Hazards  to  crew  safety  in  a  manned  aerospace  vehicle  can  ariBe  from  either  the 
vehicle  systems  or  the  miscion  event:,  and  environznsnt.  The  first  phase  of  the 
hazards  investigation  was  an  analysis  of  possible  vehicle  system  hazards.  Hie 
results  are  presented  in  Table  1  which  is  a  aumaary  of  syGtem  hazards.  The  ef¬ 
fects  of  a  subsystem  malfunction  on  the  vehicle  and  the  crew  are  described,  along 
with  possible  corrective  action  to  be  taken. 

4.2  VTOHL  HAZAHfi 

A  nonane!  mission  operation  for  a  two  stage  low  earth  orbit  VTOHL  recoverable 
vehicle  was  defined  and  exardr.e a  and  the  foilwing  sequence  was  established.  The 
two  stage  vehicle,  consisting  of  a  aub -orbital  booster  and  an  crrital  second 
ete.ge ,  would  tie  launched  vertically  on  a  p  re -programmed  ballistic  trajectory  such 
as  the  trajectory  shown  in  Figure.  6.  The  flight  path  is  generally  controlled  by 
internally  programmed  and  ground  command  guidance  systems.  Studies,  however,  are 
presently  being  made  on  the  possibility  of  piloted  VTOHL  boost  flight.  This  would 
introduce  the  additional  problem  of  manually  induced  hazards  but  it  would  not  be 
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peculiar  or  unique  to  two  staged  manned  systems. 

Upon  reaching  the  required  velocity  and  altitude,  the  staging  maneuver 
is  accomplished  by  first  shutting  down  the  booster  engines  anri  then  igniting  the 
second  stage  propulsion  system.  The  elapsed  time  from  lift-off  to  staging  is 
approximately  3-1/2  to  4  minutes,  for  staging  velocities  in  the  8000  to  10,000  fps 
range.  The  propulsion  system  used  during  the  boost  phase  consists  of  the  liquid 
rockets  in  the  boost  section  and  possibly  solid  booster  motors  during  the  lift-off 
phase,  which  are  Jettisoned  after  burnout.  The  use  of  solid  rockets  as  the  primary 
propulsion  system  would  merely  affect  the  characteristics  of  propulsion  and  pro¬ 
pellant  system  failures  but  not  eliminate  them. 

4.2.1  SEQUENCE  OF  EVENTS.  Table  2  outlines  a  typical  operating  mode  for  a 
recoverable  VTOHL  vehicle . 


TABLE  2 


Ballistic 

Trajectory 


TYPICAL  VTOHL  SEQUENCE  OF  EVENTS 


DESCRIPTION 


•  Final  phase  of  countdown 


•  Crews  Board  Vehicle 


•  Propellant  Loading 


•  Engine  Ignition  thru  Lift-off 


•  Azimuth  Roll  Correction 


•  Pitch  Over 


•  Accelerate  thru  Maximum 


Dynamic  Pressure  to  Required 


TIME  DURATION 


Approximately 


1  Hour 


Approximately 
30  Seconds 


Approximately 


3  Minutes 


Staging  Velocity 


•  Booster  Engine  Cut-off 

«  2nd  Stage  Engine  Ignition 

•  Mechanical  and/or  Ballistic  Release 
of  2nd  Stage 


The  sequence  of  events  given  in  Table  2  can  be  further  subdivided  into 
the  following  functional  stages: 

Pre -Launch 

•  Countdown 

•  Crew  boarding 

•  Propellant  loading 

•  Hold-time 
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Launch 

•  Engine  ignition 

•  Hold  down 

•  Lift-off 

•  Azimuth  roll 

•  Pitch  over 

Boost 

•  Acceleration 

•  Maximum  dynamic  pressure 

Staging 

•  1st  stage  engine  shutdown 

•  2nd  stage  engine  ignition 

•  2nd  stage  separation 

4. 2. 1.1  Pre-Launch.  During  the  final  phases  of  the  countdown  the  two  crews  board. 

A  pre-flight  check  is  made  by  the  crew,  av'  then  the  final  stages  of  the  countdown 
are  completed.  This  includes  the  final  propellant  loading  process  for  both  stages 
which  can  be  classed  as  a  hazardous  condition. 

4. 2. 1.2  Launch.  At  T-0  seconds  in  the  countdown  procedure  the  booster  engines  are 
ignited.  A  delay  action  is  built  into  the  launch  operation  to  allow  the  engines  to 
attain  maximum  thrust  for  lift-off.  During  this  thrust  build  up  time,  which  is 
approximately  two  seconds,  the  launcher  mechanism  is  in  a  hold  position.  By  ter¬ 
minating  the  booster  engines,  this  allows  recover  of  the  entire  launch  configura¬ 
tion  in  the  event  sufficient  thrust  is  not  attained  to  perform  lift  off.  The  com¬ 
mitment  to  flight  is  made  the  instant  the  launcher  hold-down  mechanism  is  released. 

This  is  a  critical  point  since  any  propulsion  system  malfunction  could  lead  to  the 
vehicle  tipping  over  on  the  launch  pad.  Following  lift-off  the  vehicle  is  auto¬ 
matically  programmed  to  perform  a  roll  maneuver  to  place  the  vehicle  in  the  proper 
azimuth  plane.  Immediately  following  this,  a  planned  pitchover  occurs  to  pvit  the 
vehicle  in  its  programmed  ballistic  trajectory.  The  entire  launch  operation  has 
been  performed  automatically  to  this  point  and  will,  continue  to  be  so  until  the 
staging  maneuver.  Any  malfunction  of  the  programmed  trajectory  will  result  in 
aborting  the  mission.  The  point  at  which  a  malfunction  occurs,  the  severity  of 
the  malfunction,  and  the  design  characteristics  of  the  vehicle  will  determine 
whether  or  not  the  crew  will  eject  from  the  vehicle,  or  attempt  to  Jettison  the 
second  stage  and  recover  one  or  both  stages  by  horizontal  landings. 

4. 2. 1.3  Boost.  The  pitch  and  roll  maneuvers  to  the  desired  trajectory  are  generally 
completed  approximately  30  seconds  after  lift-off.  The  vehicle  then  continues  ac- 

along  ^najsci^oz^r  until  pcln'w  Is  roaclisci*  Xn 

phase  of  the  flight  the  vehicle  passes  through  the  maximum  dynamic  pressure  region. 

This  is  a  hazardous  region  since  the  air  loads  on  the  vehicle  are  at  their  maximum 
and  the  escape  concept  requires  large  separation  forces. 

4. 2. 1.4  Staging.  The  elapsed  time  for  the  launch  vehicle  to  reach  the  required 
altitude  and  velocity  for  staging  is  approximately  3-1/2  minutes  from  lift-off.  The 
staging  sequence  analyzed  was  to  first  shut  down  the  first  stage  engines,  then  ignite 
the  second  stage  engines  and  release  the  second  stage  at  a  pre -determined  thrust 
level.  The  critical  point  in  this  operation  is  the  ignition  of  the  second  stage 
engines  and  the  mechanical  release  of  the  second  stage  upon  thrust  buildup.  Upon 
the  successful  separation  of  the  second  stage  vehicle  the  first  stage  flies  to  a 
landing  site.  This  flight  can  be  a  pure  glide  or  a  combination  of  glide  plus  powered 
cruise  and  landing.  The  second  stage  goes  on  into  orbit  and  eventually  returns.  After 
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successful  stage  separation  the  results  of  previous  one  crew  compartment  vehicle 
escape  studies  apply. 

k.2.2  VTOHL  HAZARDS.  Table  3  presents  the  results  of  a  hazards  analysis  for  a 
typical  VTOHL  vehicle.  This  information  was  prepared  by  combining  the  functional 
hazards  and  mission  stages  described  above.  It  shows  the  major  malfunctions  which 
would  be  most  likely  to  occur  during  a  particular  phase  of  the  mission  profile. 

In  describing  a  particular  malfunction  it  is  impossible  to  know  the  se¬ 
verity  of  the  situation  until  it  actually  occurs,  therefore  many  of  the  cases  noted 
call  for  the  crew  to  prepare  for  possible  escape.  Most  any  one  of  these  situations 
could  degenerate  to  "escape  imperative",  if  the  malfunction  was  severe  enough.  The 
conclusion  drawn  from  this  analysis  is  that  crew  protection  systems  are  necessary 
throughout  the  entire  operating  mode  of  the  vehicle. 

‘,.3  HTOL  HAZARDS 

A  nominal  nussion  operation  for  a  two-stage  low  earth  orbit  HTOL  recoverable  vehicle 
was  defined  and  examined  and  the  following  flight  sequence  was  established.  The 
HTOL  vehicle  will  t&ke-off  from  a  conventional  runway  or  lift  off  from  a  sled  car¬ 
riage  >under  manual  control  by  the  crew.  The  vehicle  will  then  fly  a  conventional 
lifting  trajectory  up  to  sortie  high  supersonic  Mach  number.  From  this  point  a 
ballistic  rocket  trajectory  would  be  flown  to  the  desired  staging  point.  A  typical 
HTOL  trajectory  has  been  presented  in  Figure  ?•  Manual  control  by  the  crew  is  an¬ 
ticipated  for  most  of  the  flight.  This  nominal  mission  would  use  air  breathing 
propulsion  up  to  the  start  of  the  rocket  trajectory.  The  elapsed  time  from  take¬ 
off  to  staging  would  be  approximately  fifteen  minutes. 

As  indicated  in  the  mission  definition  description  in  Section  2.2,  there 
are  numerous  types  of  HTOL  vehicles,  e.g.  rocket  propulsion  in  both  stages  or  the 
use  of  air  collection.  The  flight  characteristics  of  each  of  these  systems  would 
be  someuhat  different  in  the  aspects  of  trajectory  and  flight  time.  These  dif¬ 
ferences  would  have  some  affect  on  a  detailed  hazards  analysis  but  a  negligible 
effect  on  a  generalized  hazards  analysis  such  as  presented  herein.  Also,  these 
differences  should  have  no  unique  effects  on  two  6tage  manned  vehicles. 

4.3.1  SEQUENCE  OF  EVENTS.  Table  4  outlines  a  typical  sequence  of  operating 
nodes  for  an  HTOL  vehicle  without  the  air  collection  operation.  The  air  collection 
mode  would  increase  the  time  in  the  supersonic  Mach  range. 

The  sequence  of  events  given  in  Table  4  can  be  further  subdivided  into  the 
functional  stages  listed  below.  It  should  be  noted  that  in  several  areas,  espe¬ 
cially  pre -takeoff  and  staging,  the  functional  stages  for  the  HTOL  are  identical 
with  those  of  the  VTOHL  discussed  in  Section  4.2. 


Pre-Takeoff 

•  Crew  Boarding 

•  Propellant  Loading 

•  Engine  Start 

•  Taxi  &  Run-up 

•  Ground  Roil 

Take-Off 

•  Lift  off 

•  Initial  Pullup 
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Subsonic  Ascent 

.  Rocket  or  turbojet  acceleration 

•  Lifting  trajectory 

Supersonic  Ascent 

•  Rocket,  turboramjet  or  ramjet  acceleration 

■  Lifting  trajectory 

■  Maximum  dynamic  pressure 

Hypersonic  Ascent 

•  Rocket  or  rocket-ramjet  overlap  acceleration 

•  Ballistic  trajectory 

S',  aging 

•  1st  Stage  engine  shutdown 

•  2nd  Stage  engine  ignition 

•  2nd  Stage  separation 

TABLE  4 


TYPICAL  HTOL  OPERATING  MODES 


Event 

Description 

Time  Duration 

Pre-Takeoff 

•  Crews  Board  Vehicle 

Approximate  ly 

•  Final  Pre-Flight  Check 

30  Minuses 

•  Propellant  Loading 

•  Engine  Start 

•  Ground  Roll 

Take-Off 

Lift-Off 

Approximate  ly 

! 

•  Initial  pull-up 

30  seconds 

1 

j 

Subsonic  Ascent 

*  Lifting  Trajectory 

Approximately 

! 

i 

1 

•  Rocket  or  Tux-bojet  Acceleration 

30  seconds 

Supersonic 

Ascent 

■  Lifting  Trajectory 

•  Rocket -Turbo ramjet  Acceleration 

•  Maximum  Dynamic  Pressure 

Approximately 

2  minutes 

1 

i 

Hypersonic 

Ascent 

•  Rocket  or  Rocket/Turboramjet 

•  Ballistic  Trajectory 

Approximately 

1  Minute 

1 

Staging 

•1st  Stage  Engine  Cutoff 

Approximately 

•  2nd  Stage  Engine  Ignition 

30  seconds 

•Mechanical  and/or  ballistic  release 
of  2nd  stage 
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4. 3. 1.1  Pre-Takeoff.  During  the  final  phases  of  the  countdown  and  just  prior  to 
propellant  loading,  the  two  crews  board  the  vehicle.  Following  a  cotap late  cock¬ 
pit  pre-flight  tha  propellant  loading  operation  ia  accomplished.  The  p rcrpe Han't 
loading  and  engine  start  phases  are  critical  since  the  vehicle  now  presents  an 
explosion  hazard. 

A  rocket  powered  ITTCL  would  immediately  initiate  its  ground  roll  follow 
propellant  loading.  An  airbreathing  veniele  might  require  a  taxiing  and  engine 
runup  phase  prior  to  ground  10II.  System  failure  during  the  ground  roll  becomes 
most  critical  when  the  vehicle  is  cotmitted  to  flight  due  to  lack  ox  sufficient 
runway  length  to  stop.  Tha  crew  escape  system  must  be  capable  of  successfully 
recovering  the  crew  in  the  event  of  a  catastrophic  failure  during  this  phase. 

4. 3« 1.2  Liftoff.  At  liftoff  the  vehicle  retracts  its  gear,  and  performs  a 
pull-up  maneuver.  This  is  a  hazardous  eonuition  since  the  vehicle  is  generally 
operating  at  maximum  power  close  to  the  ground. 

4. 3. 1*3  Subsonic  Ascent.  After  takeoff  the  vehicle  climbs  and  accelerates  to  the 
altitude  at  which  it  will  accelerate  to  supersonic  speeds.  In  this  phase  the  ex¬ 
ternal  environmental  conditions  are  net  severe  but  the  vehicle,  system  hazards 
still  exist. 

4. 3. 1.4  Supersonic  Ascent.  The  vehicle  accelerates  to  supersonic  speeds  and  con¬ 
tinues  accelerating  to  soar,  high  supersonic  Mach  number.  Due  to  the  nature  of 
orbital  missions  the  vehicle  would  be  flying  a  pre-selected  trajectory.  Since 
manual  control  is  envisioned  there  is  the  added  problem  of  maouslly  induced  haz¬ 
ards,  e.g.  departure  from  the  specified  trajectory  in  a  critical  region.  The 
problem  of  manual  induced  hazards  arc  more  than  offset,  however,  by  the  presence 
of  man  i;i  the  system  as  an  active  participant.  These  aspects  of  manual  flight 
apply  also  in  the  other  functional  mission  stages. 

During  the  supersonic  ascent  p)te.se  the  maximum  dynamic  pressure  is  en¬ 
countered.  This  imposes  the  greatest  loads  on  the  vehicle  and  the  maximum  require¬ 
ments  on  the  separation  forces. 

4.3.1. 5  Hypersonic  Ascent.  Two  stage  vehicles  having  staging  points  in  the  ve¬ 
locity  range  greater  than  approximately  60CO  ft/oec.  will  require  a  rocket  phase. 
This  flight  region  encounters  severe  aerodynamic  heating  effects.  It  also  intro¬ 
duces  the  hazard  of  propulsion  mode  switchover.  This  can  be  accomplished  as  a 
simultaneous  switchover  nr  with  a  period  of  airbreathing  and  rocket  overlap. 

4. 3.1.6  Staging-  The  staging  sequence  involves  shutting  down  the  firs4-  stage 
propulsion  system,  igniting  the  second  stage  engines  and  releasing  the  cond 
stage.  Staging  maneuvers  and  the  optimum  sequencing  of  these  operations  are 
presently  undergoing  investigation.  The  critical  aspects  are  second  stage  igni¬ 
tion  and  release  from  the  first  stage.  Staging  generally  occurs  either  in  a  re¬ 
gion  of  severe  aerodynamic  heating  or  a  region  from  which  a  glide  trajectory  will 
enter  a  region  of  severe  aerodynamic  heating. 

After  staging  the  first  stage  returns  and  lands  and  the  second  stage  goes 
cn  to  orbit  and  eventually  returns  and  lands.  In  their  return  phases  each  stage 
may  glide  or  have  a  combina+lon  of  gliding  and  povered  flight. 

4.3*2  HTOL  HAZARDS.  Table  5  presents  the  results  cf  a  hazards  analysis  for 
HTOL  vehi  -*ea.  This  information  was  prepared  by  combining  the  system  hazards 
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MANDATORY  ESCAPE 
(BOTH  stages; 

MANDATORY  ESCAPE-  £Ni>  STG 
(1ST  STG.  ALERT) 

ABORT  MISSlON-BuTH  STG'S. 
ALERT  FOR  FG.5S7.B1E  ESCAPE 


Table  5  HTOL  Hazards  Table 
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and  mission  stages  discussed  above.  It  is  presented  for  a  fictitious  KTQL  ve¬ 
hicle  in  that  it  combines  several  of  the  possible  HTQL  variations,  e.g.  rochets 
and  airbreathing,  air  collection  and  conventional  takeoff  and  sled  assist  take¬ 
off.  The  information  is  thus  more  general  in  nature.  It  shows  the  major  mal¬ 
functions  which  would  be  most  likely  to  occur  during  a  particular  mission  phase. 

In  describing  a  particular  malfunction  it  is  impossible  to  know  the  se¬ 
verity  of  the  situation  until  it  actually  occurs,  therefore  many  of  the  cases 
noted  call  for  the  crew  to  prepare  for  possible  escape .  Most  any  one  of  these 
situations  could  degenerate  to  "escape  imperative" ,  if  the  malfunction  was  severe 
enough.  The  conclusion  drawn  from  this  analysis  is  that  crew  protection  systems 
are  necessary  throughout  the  entire  operating  mode  of  the  vehicle. 

4.4  CRITICAL  ESCAPE  AREAS 


The  sections  above  have  shown  that  escape  may  be  required  at  any  point  in  the 
mission.  There  are,  however,  several  regions  of  the  mission  which  exert  the 
strongest  influence  on  the  choice  of  escape  concept  and  on  the  escape  procedure. 
These  regions  can  be  called  the  critical  escape  areas.  These  critical  areas 
which  are  discussed  below  are  applicable,  except  as  noted,  not  only  to  multi-crew 
compartment  vehicles,  but  also  to  single  crew  compartment  vehicles. 

4.4.1  ZERO -ZERO:  {VTOHL  -  LAUNCH  PAD;  HTOL  -  RUNWAY  OR  SLED).  The  following 
are  the  most  serious  difficulties  which  mignt  be  encountered  during  the  early 
stages  of  aerospace  vehicle  launch. 

1.  Catastrophic  explosion  potential  due  to  large  quantity  of  propellants 

on  board. 

2.  Partial  or  complete  loss  of  thrust  during  lift-off  to  approximately 
5000  feet  altitude . 

3.  Less  of  control  during  lift-off  due  to  malfunction  of  flight  control 
subsystem. 


Historically,  these  malfunctions  resulted  in  destruction  of  the  vehicle  soon  after 
detection.  The  explosion  hazard  is  most  severe  in  this  condition  due  to  the  greater 
amount  of  propellant  and  the  higher,  ambient  pressure.  The  escape  concept  must  be 
adequate  to  place  each  crew  member  at  a  safe  distance  and  altitude  from  the  explod¬ 
ing  vehicle  to  safely  recover  the  crew.  This,  of  course,  is  the  general  requirement 
of  an  escape  concept  at  any  time  and  is  only  made  more  complicated  at  this  condition 
by  the  absence  of  any  initial  velocity  or  altitude.  As  velocity  and  altitude  In¬ 
crease,  the  severity  of  the  escape  problem  decreases  up  to  the  region  of  high  dy¬ 
namic  pressures. 


4.4.2  MAXIMUM  DYNAMIC  PRESSURE.  The  maximum  dynamic  pressure  area  is  a  critical 
escape  area  since  at  this  condition  the  vehicle  experiences  the  maximum  airloads 
and  is  thus  most  susceptible  to  structural  failures.  Also,  in  this  region  the  es¬ 
cape  concepts  must  overcome  the  largest  airloads  to  escape  from  the  main  vehicle. 
Also,  in  achieving  adequate  separation  from  the  main  vehicle,  the  escape  concept 
must  not  be  put  in  a  position  such  that  the  loads  exceed  human  tolerance  limits. 
There  is  also  the  problem  of  initial  separation  disturbances  which  at  this  condi¬ 
tion  have  a  larger  effect  on  escape  concept  loading,  e.g.,  aerodynamic  interference. 
For  these  reasons  the  maximum  dynamic  pressure  region  exerts  a  strong  influence  on 
escape  concept  selection. 

4.4.3  HIGH  MACH  NUMBER  -  HIGH  ALTITUDE  INCLUDING  STAGING.  This  flight  regime  is 
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critical  since  it  generally  determines  the  temperature  environment  to  which  the 
escape  concept  will  be  exposed.  For  the  present  two  stage  vehicle  concept  the 
staging  operation  which  occurs  in  this  flight  regime  is  very  critical  since  dur¬ 
ing  the  staging  operation  the  two  stages  are  changing  their  relative  positions. 

4.5  EXPLOSION  CHARACTERISTICS 

4.5.1  GENERAL  EXPLOSION  CHARACTERISTICS.  The  most  severe  malfunction  which 
might  occur  in  any  manned  space  launch  vehicle  is  a  catastrophic  explosion  of  the 
high  energy  propellants.  Since  the  hazard  of  explosions  could  influence  the  crew 
compartment  location  and  sequencing  aspects  of  a  two  staged  manned  aerospace  ve¬ 
hicle  with  separated  crew  compartments,  a  brief  investigation  of  explosion  char¬ 
acteristics  was  made. 


In  order  to  determine  the  magnitude  of  acceleration  required  to  place 
the  escape  capsules  in  a  safe  region  from  the  explosion,  the  explosive  character¬ 
istics  of  the  propellants  must  be  known.  The  standard  practice  in  aerospace  tech¬ 
nology  is  to  express  the  propellant  explosion  characteristics  in  terns  of  equiva¬ 
lent  TNT  explosions.  Table  6  from  Reference  6  presents  the  latest  data  on  TOT 
equivalents  of  propellant  combinations  in  terms  of  that  quantity  of  propellant 
which,  if  involved  in  a  detonation  or  explosion,  produces  damage  equivalent  to 
that  produced  by  a  given  quantity  of  TOT,  under  similar  condition.  The  conmon 
parameter  for  comparison  is  peak  overpressure .  This  is  empirical  data  and  ac¬ 
counts  for  the  difference  in  energy  release  and  the  fact  that  not  all  of  the 
propellant  releases  its  energy  in  the  explosion. 

The  most  hazardous  propellant  now  in  operational  use  for  aerospace  ve¬ 
hicles  is  liquid  hydrogen-liquid  oxygen.  From  Table  6  it  is  seen  that  60  percent 
by  weight  of  a  liquid  hydrogen-liquid  oxygen  propellant  combination  explodes  with 
an  equivalent  TOT  yield  of  1  to  1.  For  example,  tne  explosion  potential  of  1,000,000 
pounds  of  liquid  hydrogen-liquid  oxygen  is  equivalent  to  600,000  pounds  of  TOT. 

Figures  9  and  10  show  the  blast  pressures  and  arrival  times  of  peak  over¬ 
pressures  for  one  kiloton  TOT  explosions. 


4.h.2  SCALING  LAWS.  Determining  the  overpressures  and  arrival  times  of  these 
overpressures  for  explosions  having  TOT  equivalent  yield  other  than  one  (l)  kilo- 
ucn  is  accomplished  by  using  the  appropriate  scaling  law  from  Reference  7-  Theo¬ 
retically,  a  given  pressure  will  occur  at  a  distance  from  an  explosion  that  is 
proportional  to  the  cube  root  of  the  energy  yield.  Full  scale  tests  nave  proven 
this  relationship  to  be  true  up  to  the  megaton  range.  Therefore,  according  to 
this  law,  if  d]_  is  the  distance  from  a  reference  explosion  of  W-j_  kilotons  at  which 
a  certain  overpressure  is  attained,  then  for  any  explosion  of  W  kilotons,  occurr¬ 
ing  at  the  same  ambient  pressures,  these  same  pressures  will  occur  at  a  distance 


d  given  by 


The  reference  data  in  Figure  9  is  based  on  one 
thereby  reducing  the  above  equation  to: 


(1)  kilcton  energy  yield 


where  d.,  x'efers  to  the  distance  for  a  one  (l)  kiloton  explosion. 
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When  using  Figure  9  to  determine  a  distance  d  from  an  explosion,  the 
term  W  is  for  the  TOT  equivalent  in  pounds.  Determining  time  t  using  the  data 
in  Figure  10 for  the  value  of  time  t^,  the  weight  W  is  expressed  in  kilotons. 

.  1/3 

V1  * 


t  - 


The  expression  for  overpressure  p  at  altitude  is 

P  =  Pq  -L- 
1  P„ 


vnere  P  is  the  ambient-  pressure  at  altitude,  PQ  is  the  ambient  sea  level  pressure, 
and  is  the  overpressure  at  sea  level.  The  corrected  value  of  distance  for  the 
new  overpressure  level  is  then  given  by 

a  .  dl  wV3 (  M 


The  arrival  time  of  the  overpressure  at  the  new  distance  is 

1/3  y  _  V  1/2 

±/  1  #  P  1 

t  =  tn 


“1/3  (  t-)  (t) 


where  TQ  and  T  are  absolute  ambient  temperatures  at  sea  level  and  altitude  respec¬ 
tively. 


For  explosions  up  to  about  5,000  feet  altitude,  the  corrections  will  be 
small  and  can  be  omitted. 

Time -distance  relationships  for  overpressures  created  by  various  TOT 
equivalent  explosion  are  shown  in  Figures  11  to  14  for  sea  level,  20,  40  and  60 
thousand  feet  altitudes,  respectively.  These  figures  show  that  for  an  equal 
amount  of  propellant  exploding  at  altitude,  the  distance  a  shock  wave  travels 
end  the  time  it  requires  to  travel  that  distance  is  shorter  than  that  at  sea 
level.  For  high  energy  fuel  vehicles  such  as  those  used  in  this  study,  the  sea 
level  condition  sets  the  design  parameters. 

A  crew  escape  capsule  designed  to  escape  a  sea  level  explosion  will 
have  more  than  adequate  performance  at  altitude  since  the  blast  wave  is  weaker 
and  the  amount  of  propellant  available  for  an  explosion  is  less  than  at  sea  level. 

4  5.3  EXPLOSION  CONSIDERATIONS  FOR  ESCAPE.  The  primary  effect  of  explosions 
affecting  escape  is  the  overpressure  associated  with  the  blast  wave.  The  maximum 
value  of  overpressure  which  can  be  tolerated  is,  of  course,  a  function  of  the 
specific  escape  concept  design.  In  general,  maximum  values  between  5  and  10  psi 
overpressure  are  used  for  escape  concept  design.  As  the  design  overpressure  in¬ 
creases  the  structural  weight  penalty  increases. 

The  high  propagation  velocity  of  the  blast  wave  contributes  to  the  se¬ 
verity  of  the  explosion  hazard.  The  magnitude  of  the  problem  is  shown  in  Figure 
15  which  presents  shock  wave  propagation  characteristics  in  terms  of  time  and 
distance  for  a  LO,  -  LH,-  VTOHL  vehicle  with  a  propellant  load  having  a  TOT  equiva¬ 
lent  of  1  million  pounds.  This  figure  shows  that  the  shock  wave  reaches  an  over¬ 
pressure  of  5  psi,  1200  feet  from  the  point  of  detonation  in  w.643  seconds. 
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These  values  ere  such  t^at  it  is  mandatory  that  the  escape  concept  separate  prior 
to  the  initial  detonation.  This  places  severe  requirements  on  any  malfunction  de¬ 
tection  system.  This  aspect  will  be  explored  in  more  detail  in  Section  6  on  Es¬ 
cape  Procedure. 

The  aspect  of  two  crew  compartments  is  influenced  by  explosion  charac¬ 
teristics  in  regard  to  location  and  sequencing  since  one  of  the  compartments  is 
closer  to  the  point  of  detonation. 


Explosion  Characteristics  —  Se*  Level 


Explosion  Chameterl sties  --  20,000  Peet 


E^losicn  CbAracteristice  —  40,000  Feet 
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SECTION  5 
ESCAPE  CONCEPTS 


The  information  presented  in  Sections  3  and  h  has  established  the  neces¬ 
sity  of  and  requirements  on  escape  concepts  for  a  two  stage  manned  recoverable 
aerospace  vehicle.  As  expected,  these  results  are  identical  with  results  of 
similar  studies  performed  for  single  stage  vehicles,  e.g.  Reierences  1  and  2. 

The  next  logical  step  in  an  escape  criteria  analyses  is  the  selection 
of  suitable  escape  concepts.  For  the  present  study,  this  task  consisted  of  a 
review  of  escape  concepts  previously  investigated  or  proposed  for  single  crew 
compartment  aerospace  vehicles,  e.g.  References  .1  and  2.  The  emphasis  for  the 
review  was  on  any  unique  problems  resulting  from  the  two  separated  crew  conq>art- 
nents  which  might  influence  the  selection  cf  an  escape  concept  for  a  particular 
design. 


In  the  selection  of  an  escape  concept  for  a  particular  vehicle  design 
it  Is  necessary  to  consider  the  tradeoff  between  the  following  factors: 

1.  Reliability  of  the  main  vehicle  and  the  proposed  escape 
concepts . 

2.  Escape  concept  complexity. 

3-  Flight  envelope  effectiveness. 

4.  Effect  on  vehicle  performance  characteristics  such  as 
payload  capability . 

5.  Effect  on  vehicle  structural  integrity. 

6.  Development  time  and  cost. 

5-1  ESCAPE  CONCEPT  COMPARISON 

The  following  escape  concepts  were  reviewed: 

1.  Individual  ejection  seats 
a)  Open 

n)  Encapsulated 

2.  Individual  capsules 

3-  Hon -recoverable  capsule  with  ejection  seats 

4.  Recoverable  capsule  with  ejection  seats 

5 .  Recoverable  capsule 

6.  Capsule  with  escape  tower 

7.  Combination  of  above 
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Not  all  of  these  concepts  would  totally  satisfy  the  requirement  for  full  flight 
envelope  escape,  however,  each  concept  should  be  considered  as  a  trade-off  toward 
the  overall  mission. 

Figure  16  presents  a  sketch  of  the  basic  concepts.  Pertinent  factors 
relative  to  each  of  the  escape  concepts  considered  were  analysed  to  deter  nine  the 
acceptability  of  these  concepts  to  fulfill  the  requirements  gi  ven  in  Section  3. 

5*1.1  INDIVIDUAL-  EJECTION  SEATS  (OPEN  AND  ENCAPSULATED) 

a.  Sequencing  of  seat  ejections  and  strict  crew  discipline  re¬ 
quited  to  minimize  mid-air  collisions.  This  problem  is  made 
more  severe  by  the  presence  of  two  separated  crew  compart¬ 
ments  . 

b.  Individual  hatches  required  to  permit  ejection.  This  com¬ 
promises  the  air  tightness  of  the  vehicle  for  its  intended 
missl on. 

c.  Seat  positioning  for  high  acceleration  forces,  if  required, 
would  be  compromised  by  the  requirement  for  seat  ejection 
rails . 

d.  Ej  ecticn  seats  of  standard  design  would  not  allow  adequate 
protection  nor  separation  distance  when  escaping  from  severe 
explosion  and/or  fire. 

e.  Ejection  seats  have  no  high  temperature  re-entry  capability. 

f.  Open  ejection  seats  are  restricted  to  use  at  relatively  low 
altitudes  and  dynamic  pressures  below  I5OO  to  2000  psf .  This 
amounts  to  a  very  small  portion  of  the  overall  mission  en¬ 
velope  . 

g.  Survival  equipment  must  be  incorporated  with  each  seat. 

h.  The  downed  crew  could  become  widely  separated  on  the  ground 
and  rescue  operations  hampered. 

i.  Individual  ejection  seats  would  create  a  vehicle  payload 
weight  penalty  of  approximately  375  pounds  per  seat  for  an 
open  configuration  and  approximately  TOO  lbs.  per  seat  for 
the  encapsulated  configuration.  This  would  be  the  least 
weight  penalty  of  the  concepts  considered. 

5-1.2  INDIVIDUAL  CAPSULES  (EACH  WITH  FULL  ESCAPE  CAPABILITY) 

a.  Individual  capsules  with  escape  capabilities  for  the  entire 
mi!  Ion  envelope  would  have  the  advantage  of  providing  es¬ 
cape  at  least  for  some  of  the  crew  members  in  the  event  of 
damage  to  the  cockpit  area. 

b.  Each  capsule  would  require  independent  detection,  initia¬ 
tion  and  separation  systems  to  accomplish  escape.  This 
would  compromise  the  overal1  reliability  and  induce  a 
severe  weight  penalty. 
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c.  Each  capsule  should  have  all  the  characteristics  of  a  6ingle 
full  crew  capsule.  This  includes  being  aeroiynamically  stable, 
controllable,  capable  of  re-entry,  and  recoverable.  Integra¬ 
tion  of  a  capsule  of  this  description  would  present  definite 
problems  of  placement  and  volume,  capsule  separation,  and  of 
sequencing  escape  to  minimize  the  hazard  of  colliding  after 
separation. 

d.  The  desirability  of  a  single  crew  station  with  free  access 
throughout  to  permit  changes  in  duty  stations  would  be  re¬ 
stricted  by  the  use  of  Individual  capsules.  The  second  stage 
vehicle  In  particular  should  incorporate  the  single  station 
arrangement  due  to  the  longer  flight  duration  and  orbital  re¬ 
quirement.  The  booster  or  first  stage  does  not  necessarily 
require  the  crew  to  move  about  as  it  has  a  much  shorter  flight 
duration. 

e.  The  structural  integrity  of  the  main  vehicle,  including  its 
air  tightness  would  be  compromised  by  the  incorporation  of 
the  independent  capsules. 

f.  The  downed  crew  could  be  widely  separated  if  individual  cap¬ 
sules  were  used  and  rescue  operations  would  be  hampered. 

g.  There  is  a  sequencing  problem  which  is  made  more  complex  by 
the  presence  of  two  crew  compartments . 

5.1.3  NON-RECOVERABLE  CAPSULE  WITH  EJECTION  SEATS  (FULL  CREW  CAPSULE  WITH 
EJECTION  SEATS  FOR  FINAL  RECOVERY) 

a.  The  concept  provides  a  single  capsule  for  escape  from  any 
point  within  the  mission  envelope  for  both  stages  and  uti¬ 
lizes  ejection  seats  for  the  final  crew  recovery  phase. 

b.  Non-recovery  of  main  capsule  eliminates  requirements  for 
capsule  recovery  system,  lauding  impact  devices  and  flota¬ 
tion  gear. 

c.  In  event  of  ground  level  escape,  the  capsule  locket  motor 
must  provide  sufficient  thrust  for  good  separation  distance 
with  adequate  altitude  to  perform  safe  seat  ejections. 

d.  Tliis  concept  would  permit  use  of  ejection  seats  directly  if 
under  suitable  conditions  of  low  altitude  and  low  velocity. 

e.  Reliability  01  escape  system  compromised  by  double  ejection 
sequence . 

f.  Capsule  must  be  sufficiently  stable  to  allow  seat  ejection 
sequence . 

g.  Most  of  the  considerations  discussed  for  ejection  seats  in 
Section  5.1.1  also  apply  to  this  concept. 

h.  With  the  exception  of  the  ejection  seat  sequencing  and 
separation  trajectory  problems,  this  concept  has  no  unique 
problems  in  regard  to  its  UGe  in  a  two  stage  vehicle. 
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5-1.4  RECOVERABLE  CAPSULE  WITH  EJECTION  SEATS 

a.  The  primary  escape  system  is  the  full  crew  capsule  concept 
with  ejection  seat  provided  as  a  redundant  system. 

b.  A  capsule  recovery  system,  landing  impact  device  and  flota¬ 
tion  gear  are  incorporated  in  capsule . 

Escape  system  complicated  by  addition  of  redundant  seat  ejec 
tion  escape  system.  Reliability  of  overall  system  is  conqoro 
mised,  and  payload  weight  penalty  is  increased. 

d.  Escape  system  rocket  motor  provides  sufficient  thrust  for 
good  separation  distance  and  adequate  altitude  to  deploy 
capsule  recovery  system  or  use  individual  ejection  seats. 

e.  There  are  no  particular  problems  resulting  from  the  applica¬ 
tion  of  this  concept  to  two  stage  vehicles  other  than  the 
ejection  seat  problems  noted  above. 

5.1.5  RECOVERABLE  CAPSULE 

a.  The  recoverable  capsule  concept  consists  of  a  single  cap¬ 
sule  for  each  stage  which  encompasses  the  stage  crew  com¬ 
partment. 

b.  No  individual  escape  provisions  are  provided.  This  con¬ 
cept  provides  full  crew  escape  capability  throughout  the 
vehicle  mission  envelope.  Redundant  recovery  systems 
could  be  incorporated  to  back  up  the  primary  system. 

c.  Capsule  incorporates  suability  and  control  system,  emer¬ 
gency  life  support  system,  re-entry  heating  protection, 
maneuvering  controls,  landing  impact  attenuation  device 
and  flotation  gear. 

d.  Crew  remains  together  throughout  escape  and  recovery, 
and  can  provide  mutual  assistance  in  rescue  operation. 

e.  Crew  seat  can  be  constructed  specifically  to  provide 
proper  body  positioning  depending  on  forces  applied. 

f.  This  concept  permits  the  least  vehicle  weight  penalty 
for  an  escape  system  which  is  functional  throughout  the 
flight  envelope . 

g.  The  single  capsule  concept  permits  an  optimum  structure 
with  maximum  air  tightness.  Crew  entrance  and  exit  hatch 
is  only  opening  required,  other  tiian  windows,  into  crew 
comparttaenu. 

h.  This  concept  can  have  the  escape  rocket  motor  in  a  self- 
contained  installation  or  it  can  be  mounted  on  a  tower 
and  jettisoned  at  pre -determined  altitude,  or  mounted 
in  escape  capsule  and  carried  throughout  the  flight. 
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Using  the  tower  concept  requires  an  additional  rocket  motor 
system  carried  in  the  capsule  for  use  after  Jettisoning  the 
tower.  The  rocket  motor  carried  in  the  capsule  is  utilized 
for  the  retro-rocket  in  the  event  an  orbital  escape  is  re¬ 
quired. 

i.  This  concept  has  no  inherent  problems  in  application  to  a 
two  stage  vehicle . 

5-2  ESCAPE  CONCEPT  APPLICATION  TO  VEHICLE  CONFIGURATION 

The  various  vehicle  configurations  considered  in  this  study  present  different 
design  requirements  which  directly  affect  the  shape  of  the  escape  capsule. 

The  selection  of  a  nose  or  pod  capsule  for  a  two  stage  vehicle  is  de¬ 
pendent  primarily  on  the  specific  configuration  geometry  and  is  not  influenced 
by  the  requirement  of  two  separated  crew  compartments.  The  selection  between 
ballistic  and  lifting  configurations  depends  upon  the  escape  corridor  and  any 
escape  trajectory  requirements,  e.g.,  surface  temperature  limitations. 

The  location  of  the  escape  capsule  on  each  vehicle,  from  the  standpoint 
of  escape,  is  significant  only  in  assuring  an  upward  escape  trajectory.  Vehicle 
configurations  which  have  the  second  stage  mounted  on  the  underside  of  an  HTOHL 
booster  are  assuming  a  high  degree  of  risk  for  the  second  stage  crew  during  the 
takeoff  and  initial  pull-up  due  to  the  ineffectiveness  of  a  downward  ejected 
capsule  at  low  altitude . 

5 ■ 3  SELECTED  CONCEPTS 

As  indicated  previously  the  selection  of  an  escape  concept  for  a  particular  design 
depends  upon  tradeoff  studies  of  the  many  factors  involved .  However,  previous 
studies  of  single  crew  compartment  aerospace  vehicles  favor  the  fully  recoverable 
capsule  concept  discussed  in  Section  5-1-5*  The  present  investigation  for  two 
stage  vehicles  has  revealed  no  unique  problems  associated  with  this  concept  due 
to  its  application  to  two  separated  crew  compartments. 

In  selecting  fully  recoverable  escape  capsule  configurations  the  follow¬ 
ing  criteria  should  be  considered: 

1.  The  capsule  should  be  aerodynai.il  cally  stable. 

2.  The  capsule  should  have  a  stabilization  and  control 
system. 

3»  Tne  separation  interface  should  minimize  separation 
interference  effects. 

4.  The  capsule  crew  compartment  must  be  protected  from  the 
high  temperature  environment  of  re-entry. 

5.  Tne  capsule  must  have  provisions  for  a  safe  impact  and 
in  the  case  of  water  impact,  flotation  devices. 

6.  Communications  and  emergency  life  support  systems  are 
required . 

7*  Seat  positioning  may  be  required  jf  excessive  load 
factors  are  encountered. 
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Fully  recoverable  capsules  can  be  classified  according  to  capsule  posi¬ 
tion  on  the  main  vehicle  as  nose  capsules  or  pod  capsules.  Each  of  these  classi¬ 
fications  can  be  further  divided  in^o  ballistic  configurations  or  lifting  con¬ 
figurations.  Figures  17  and  18  present  sketches  of  these  two  types.  These  par¬ 
ticular  configurations  vere  discussed  in  Reference  5  and  are  presently  being  in¬ 
vestigated  under  Air  Force  Contract  AF33(6l5)-H31>  "Investigation  of  Re-entry 
Escape  System  Separation  Techniques  From  a  Maximum  Heating  Re-entry  Trajectory." 
These  configurations  vere  used  to  obtain  the  nominal  separation  performance 
characteristics  presented  in  Section  6. 
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Figure  1?  Ballistic  Body  -  Bose  Capsule 
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Figure  18  Lifting  Body  -  Noae  Capsui.e 
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ESCAPE  PROCEDURE 


One  reliability  thesis  orten  advanced  is  that  any  mission  will  turn  out  successful 
unless  a  mistake,  or  mechanism  failure,  occurs. 

With  the  advent  of  more  and  more  complicated  requirements,  long  duration 
hypersonic  aerospace  missions,  this  thesis  gains  more  and  more  in  idealism  and  less 
and  less  in  fact.  Perfect  performance  without  a  mistake,  without  a  malfunction, 
under  a  sustained  and  severely  constrained  complex  becomes  an  unpredictable  phe¬ 
nomenon,  and  failure  counteraction  emerges  as  a  more  thinkable  thesis  under  the 
prevailing  uncertainties. 

Today's  problems  of  advanced  concept  vehicles  and  crew  engineering  more 
than  ever  emphasize  the  great  pressure  of  physical  and  metric  constraints  on  func¬ 
tionality  of  vehicle  and  man.  Functional  design  is  called  upon  not  only  to  reduce 
the  likelihood  of  mechanism  malfunction  and  human  error  but  to  increase  the  cap¬ 
ability  to  recover  in  case  of  either  event.  Increasing  the  capability  to  recover 
requires  situation  sensitivity  and  coniuon  sense. 


The  practicable  designation  of  recovery  into  components  will  require  the 
conjunctive  premises  to  be  identified.  Typically,  a  piece-wise  action  analysis  of 
recovery  from  a  mechanism  malfunction  or  human  error  sets  forth  the  following  re¬ 
quirements: 

1.  Time  to  search,  and  search  devices 

2.  Time  to  recognize,  and  perception  devices 

3.  Time  to  decide,  and  decision  devices 

4.  Time  to  effect,  and  manual/mechanical  actions  and/or  devices 

With  regard  to  crew  escape,  these  actions  are  the  detection,  initiation 
and  separation  operations. 

In  their  specific  instances  of  use  in  an  escape  system  concept,  the  fore¬ 
going  detection,  initiation  and  separation  action  elements  introduce  varied  and 
challenging  demands  upon  the  designer.  The  designer  responds  to  most  demand  factors 
in  terms  of  machine  Derformance.  Where  the  designer  determines  that  a  set  of  chance 
causes  exists,  design  responses  will  be  set  forth  in  more  complicated  parameters 
perhaps,  of  man/machine  cooperation. 

These  action  elements,  detection,  initiation,  and  separation  were  investi¬ 
gated  to  determine  what  unique  problems,  if  any,  existed  as  a  result  of  their  appli¬ 
cation  to  crew  escape  provisions  for  an  aerospace  vehicle  with  two  separated  crew 
compartments . 

6.1  DETECTION  AND  INITIATION 

The  detection  and  Initiation  task  can  be  logically  separated  from  the  physical  ac¬ 
tion  of  separation.  Advanced  manned  aerospace  vehicles  have  reached  the  point  of 
complexity  where  malfunction  detection  and  escape  initiation  are  now  a  systems 
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operation.  Since  there  is  this  concept  of  an  abort  detection  warning  and  initia¬ 
tion  system,  (ADWIS),  it  should  be  incorporated  into  vehicle  design  studies  at  an 
early  date  rather  than  after  a  vehicle  is  designed. 

The  relationship  of  the  ADWTS  to  vehicle  design  is  presented  in  Figure  19- 
The  area  of  study  which  relates  the  ADWIS  to  vehicle  design  is  criticality  and  failure 
sensing.  It  would  be  an  u  visual  circumstance  where  an  escape  system  design  would  pro¬ 
vide  for  escape  from  al 1  conceivable  hazard  possibilities.  Practical  design  brings 
demands  of  proper  weight,  space  and  cost  tradeoffs  or  technology  limitations  and  op¬ 
timizations.  Accordingly,  likelihood  distributions  and  densities  of  hazard  occur¬ 
rence  require  investigation  as  design  criteria  in  addition  to  the  determination  of 
the  possibilities  of  hazards  or  potential  hazards.  This  is  the  criticality  and 
failure  sensing  task  noted  on  Figure  19.  A  mathematical  definition  of  criticality  is 
presented  in  Appendix  1. 

The  criticality  and  failure  sensing  task  furnishes  input  data  to  the  de¬ 
sign  of  the  ADWIS  and  also  provides  information  for*  use  in  vehicle  design  itera¬ 
tions  . 

In  the  present  generalized  study  there  is  no  specific  design  for  which  a 
criticality  study  can  be  made.  The  information  presented  on  detection  and  initia¬ 
tion  In  the  sections  which  follow  is  therefore  cf  a  general  nature. 

6.1.1  DETECTION.  Wherever  they  occur  together,  the  functions  introduced  pre¬ 
viously  as  search  and  recognition  can  be  described  with  the  gene- mlizat ion  known  as 
detection.  Detection  can  be  defined  as  the  action  or  function  of  any  device  which 
indicates  the  presence  of  an  entity  of  interest. 

Detection  premises  may  be  closed,  (where  all  possibilities  are  known)  open 
or  undefined.  For  a  general  example,  suppose  that  for  a  certain  course  of  action  it 
is  necessary  to  infer  situation  totality  from  fractional  observations.  Machine  de¬ 
tection  may  prove  unmanageable,  and  the  human  element  prove  indispensable  for  prac¬ 
tical  solution  of  the  problem.  The  detection  premises  may  ue  open  or  undefined.  On 
the  other  hand,  as  the  time  domain  becomes  more  restricted,  the  practicality  of  man 
over  machine  response  becomes  clearly  reversed,  the  detection  premises  are  conse¬ 
quently  less  open  or  undefined. 

Implication  of  the  human  in  the  detection  problem  complicates  the  problem 
since  it  then  becomes  necessary  to  set  forth  a  man/machine  capability  of  achieving 
detection  system  success  within  some  finite  time. 

With  respect  to  the  present  study,  detection  refers  to  the  detection  of 
aercspe.ee  vehi  cle  system  malfunctions  affecting  crew  safety. 

The  imminently  boardable  vehicle,  Its  environment  and  crew  are  the  diverse 
rrnn/machine  situation  complex  which  the  functional  escape  detection  concept  must  con¬ 
tain.  Each  region  must  be  surveyed  for  practically  significant  maliunctions  or 
indications  of  impending  catastrophe. 

Detection  in  the  present  study  has  been  limited  to  the  area  of  sensors. 

Since  there  are  some  respectable  contentions  concerning  whether  or  not  the  human 
element  in  a  man/machine  system  can  behave  as  a  "sensor",  consideration  was  limited 
to  non-human  sensors. 

In  the  particular  problem  at  hand,  no  peculiar  sensor  problems  resulting 
from  the  concept  of  two  separated  crew  compartments  were  uncovered  beyond  the  per¬ 
ennial  one  of  improving  state-of-the-art. 
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Figure  19  Abort  Detection,  Warning  and  Initiation  System  (ADWTS)  -  Data.  Interface 
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6.1.2  IOTTIATTOH.  In  the  event  of  detection  of  a  ran lfunction,  the  AIVI5 
nust  provide  aeans  for  the  best  decision  for  responsl v-  or  evasive  action.  Where 
the  inquired  immediate  action  is  not  beyond  reaction  capabilities  of  abort  com¬ 
manders,  either  ground  or  on  board,  suitable  display  data  must  be  provided  at  each 
command  post.  Where  the  immediate  action  required  is  beyond  reaction  capabilities 
of  individual  abort  commanders,  automatic  or  Jurisdictional  command  must  be  pre- 
dispositioned  in  the  time  and  space  complex  in  the  manned  vehicle  operational  com¬ 
plex  which  includes  the  vehicle  and  any  supporting  ground  facilities.  The  para¬ 
metric  definition  of  such  dispositions  is  the  first  step  to  the  solution  of  timely, 
orderly  and  rational  safety  decisions. 

All  possible  safety  decisions  (under  emergency,  or  otherwise)  can  be 
classified  simply  as  belonging  to  one  of  two  sets: 

1.  Those  decisions  which  alert  or  warn  the  endangered  in 
time  to  take  necessary  responsive  action 


2.  Those  which  do  not 


In  the  normal  sequence  of  action  following  decision,  we  are  at  once 
concerned  with  the  beginning  of  some  positive  act.  In  the  present  investigation, 
unless  otherwise  noted,  the  word  initiation  denotes  the  irrevocable  beginning  of 
the  abort  or  escape  act  only. 

Summing  up  all  the  initiation  premises  set  forth  thus  far,  we  note  that 
we  are  interested  in  decisions  of  warning  and  impending  initiation,  and  decisions 
of  no  warning  but  initiation. 

6. 1.2.1  Problems.  The  two  principal  problem  areas  of  the  warning  and  initiation 

operation  as  considered  in  the  present  study  are: 

1.  The  use  of  sensed  information;  and 

Tiis  Ju i*i.2 diction  c vs r 

Use  of  Sensed  Information.  The  use  of  sensed  information  is  open  and  undefined  so 
long  as  there  remain  open  and  undefined  feasible  options  in  the  command  and  control 
complex.  Problem  definition  here  begins  with  defining  the  role  of  man  in  on-board 

systems . 


The  role  of  man  can  be  assigned  as  support,  i.e,  augmentation  for  auto¬ 
matic  programmed  or  ground  controlled  systems  of  the  vehicle,  or,  the  role  of  man 
can  be  assigned  as  one  of  an  independent  controller  of  the  vehicle,  supported  and 
augmented  by  automatic  programmed  crew  and  ground  informed  systems.  Here  the  man 
ls  used  for  his  capability  to  change  programs,  make  decisions  and  select  alternate 
uses  of  equipment,  tasks  for  which  no  machine  has  ever  been  devised. 

In  present  VTOHL  vehicles  man  acts  in  a  passive  role  although  studies 
are  being  made  regarding  the  incorporation  of  man  into  the  boost  operation  in  a 
more  active  manner.  Man  is  generally  considered  as  the  prime  controller  in  pre¬ 
sently  envisioned  HTOL  vehicles. 

The  present  study,  however,  is  concerned  with  the  escape  subsystem  and 
not  the  operations  of  the  overall  vehicle.  The  particular  problem  is  the  use  of 
the  sensed  malfunction  information  provided  by  the  detection  system.  Is  the  in¬ 
formation  given  to  man  or  an  automatic  device? 


In  contrast  to  man,  a  passive  or  automatic  device  is  one  of  a  singular 
nature.  It  is  capable  of  performing  only  those  functions  -  and  calling  out  only 
those  responses  which  are  anticipated  in  its  design.  Thus,  the  automatic  device 
can  only  react  with  predetermined  response  which  is  specifically  connected  to 
given  stimulating  conditions.  Yet,  despite  the  fact  that  the  design  of  automatic 
devices  must  anticipate  and  contain  the  numerous  possible  states  of  operation  in¬ 
volved,  the  automatic  mode  in  certain  circumstances  becomes  indispendable  tc  func¬ 
tional  escape  system  concepts.  In  other  circumstances  the  automatic  mode  nay  not 
be  preferred,  or  even  justifiable,  and  there  remain  such  circumstances  to  be  de- 
f i ned . 


Although  the  human  element  renders  a  system  less  predictable,  this  un¬ 
predictability  may  make  possible  a  more  desirable  system  characteristic.  Here 
we  identify  flexibility  as  the  most  likely  characteristic  -  flexibility  as  that 
which  enables  a  manned  system  to  take  into  account  factors  beyond  those  anticipated 
in  design.  The  problem  of  conceptually  defining  feasible  flexibility  is  the  most 
challenging  and  important  one  of  all.  Accordingly,  control  display  equipment  is 
defined  as  the  focal  point  of  the  at  hand  unique  detection  and  initiation  problem. 
Control  display  equipment  Is  indispensable  to  making  the  difference  between  a  ve- 
!  cle  in  which  all  aboard  are  passengers  and  one  in  which  there  is  command. 

.  irisdiction.  Escape  initiation  as  an  act  is  recognized  primarily  as  the  respon- 
;  bility  of  the  senior  commander,  yet  a  stricken  multi-manned  vehicle  may  ur^er 
■rtain  conditions  have  better  crew  survival  probabilities  otherwise.  The  problem 
re  is  to  define  the  premises,  the  options  and  designate  the  commander  who  is  sole 
.thcrity  for  all  action  governing  safety  and  integrity  of  the  craft. 

A  simply  represented  complex  of  likely  command  posts  for  a  hypothetical 
rospace  vehicle,  as  currently  conceived,  is  indicated  in  the  Venn  diagram  shown 
Figure  20. 

The  commander  by  definition  must  be  a  primary  situation  determiner,  de¬ 
cision  maker,  and  control  option  selector.  A  vehicle  commander  in  command  can  be 
effective  c.-ly  where  he  has  the  time  to  choose  c.vnile.ble  options  and  operate  in 
selected  control  modes  in  response  to  conditions  he  finds  in  operations.  The  ve¬ 
hicle  commander  faces  a  profoundly  changing  environment  with  incomplete  information, 
and  with  little,  or  late,  decision  feedback.  The  problem  here  is  to  give  the  com¬ 
mander  the  "maximum  useful"  information  as  to  any  emergency. 

The  problem  of  "who  and  when"  in  the  concept  of  shared  or  sequenced  res¬ 
ponsibility  for  advanced  concept  vehicles  must  be  answered  in  a  general  manner 
sin-'e  there  is  r.ot  a  specific  design  under  consideration. 

6. 1.2. 2  Problem  Solutions.  This  section  will  propose  and  evaluate  solutions  to 

the  warning  and  initiation  problems  of:  1)  use  of  sensed  information;  and  2)  jurisdic¬ 
tion  which  were  defined  in  Section  6. 1.2.1. 

Use  of  Sensed  Information.  Malfunction  information  can  be  distributed  within  the 
aerospace  vehicle  and  to  ground  facilities.  The  concern  herein  is  with  the  use  of 
this  data  within  the  aerospace  vehicle. 

The  objective  of  the  use  of  sensed  information  is  the  simplest  organiza¬ 
tion  of  information  and  itG  arrangement  in  any  cockpit,  so  that  the  pilot  can  clearly 
understand  the  situation  elements,  connections,  sequences,  orders  and  what  cues  he 
may  use  and  expect  to  use  to  effect  a  decision.  The  premises  conceived  must  make 
clear  the  specific  relationships  which  are  important  to  the  control  decision  task 
at  any  moment. 


49 


FDL-TDR-6U  -l4t? 


NOTES :  LOD  REP  =  Department  of  Defense  Representative 
AF  =  Responsible  Air  Force  Command 
OPNS  DIR  =  Operations  Director 
FLT  DIP.  =  Flight  Director 
NET  DIR  =  Network  Director 
TO  =  Test  Conductor 
RSO  =  r.n nge  Safety  Officer 
0(RI)  =  Real  Time  Observer 
0(S)  =  Sighting  Observer 
A  =  Commander  -  Capsule  A 
E  -  Commander  -  Capsule  B 
P.F  =  Radio  Frequency 

Areas  of  circles  designate  proposed  abort  jurisdiction  notions.  The 
relative  size  of  the  areas  is  arbitrary,  Tangent  and  overlapping  areas 
denote  conceivable  abort  jurisdiction  unios.  Overlapped  areas  designat 
proposed  common  elements  of  the  union.  Precedence  is  indicated  in  a 
direction  radially  outward  from  center, i.e.,  starting  with  overlapped 
link  for  initiation  in  the  abort  jurisdiction  union  of  interest 


Figur-  20  Venn  Diagram  of  Possible  Command  Posts 
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Initially  the  subject  will  be  discussed  in  terms  of  a  single  command 
post.  Qualifications  introduced  by  the  concept  of  two  command  posts  will  then 
be  introduced. 

Of  the  ways  conceived  to  facilitate  the  vehicle  commander's  decision 
making  task,  the  combination  of  selective  automatic  control  and  parallel  human 
effort  has  been  adopted  as  most  promising  where  coordination  of  details  of  opera¬ 
tions  task  sharing  or  task  delegation  gravitates  around  the  on-board  centered 
command  function.  Concept  options  and  premises  conceived  for  the  on-board  cen¬ 
tered  command  action  are  presented  subsequently,  but  first  it  is  significant  to 
discuss  possible  safety-oriented  decisions.  * 

Table  7  presents  the  proposed  decisions  and  decision  types.  The  main 
division  is  between  warning  and  initiation  decisions.  Within  each  subdivision 
the  decisions  may  be  automatic  or  manual.  In  the  case  of  manual  initiation  auto¬ 
matic  backup  should  be  provided. 


TABLE  7 

COMMAND  POST  DECISIONS  AND  DECISION  TYPES 


CLASS  DECISION  TYPE 


q 

EJECT! 

OPERATIONS 

§ 

M 

2 

s 

ABORT! 

(TO  EJECT) 

COMMAND 

OPERATIONS 

S 

M 

o 

s 

< 

EJECT! 

COMMAND 

OPERATIONS 

s 

EJECT 

IMMINENT! 

COMMAND 

o 

OPERATIONS 

a 

< 

o 

ABORT 

COMMAND 

IMMINENT! 

OPERATIONS 

CANCEL: 

COMMAND 

NOTE 

OPERATIONS 

Ir  the  terminology  used  herein  abort  refers  to  mission  abort,  which 
includes  but  is  not  limited  to  escape.  Eject  refers  to  escape.  An  operations 
decision  is  defined  as  that  decision  initiated  at  a  responsible  command  post  as 
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a  result  of  evaluating  available  and  sufficient  operations  data.  A  command  de¬ 
cision  is  define i  for  a  given  conmand  post  as  an  operations  decision  initiated 
at  another  responsible  command  post.  For  exancpre,  in  a  first  stage  vehicle  a 
command  decision  would  be  one  made  in  the  second  stage  or  on  the  ground  and 
given  to  the  first  stage. 

All  responsible  conmand  post  decisions  must  terminate  in  on-board  res¬ 
ponsive  action.  Where  a  command  decision  is  escape  initiation  or  eject,  on-board 
follow-up  action  is  automatic.  Where  escape  initiations  are  originated  onboard, 
the  action  can  be  either  manual  or  automatic.  The  onboard  manual  options  which 
admit  the  desired  flexibility  in  the  U3e  of  sensed  information  must  be  based  on 
the  notion  of  early  warning  or  pit-instruction . 

If  we  consider  cockpit  circumstances  which  are  sensitive  only  to  the 
chance  occurrence  of  a  particular  malfunction,  say  N,  then  N  as  a  particular 
event  can  be  said  to  have  a  cons tart  onset  rate.  The  waiting  time  for  the  event 
N  to  occur  is  exponentially  distributed,  the  hazard  rate  is  consta*  that  is,  N 
is  equally  likely  to  occur  during  any  part  of  the  interval  of  time  we  are  search¬ 
ing  end  we  really  have  very  littl  •  .Information  relevant  to  decisions  anticipating 
catastrophe,  if  that  is  what  malfunction  N  represents  in  reality.  Now  take  the 
case  of  the  occurrence  of  a  different  malfunction,  say  N-2.  If  N-2  belongs  to  a 
prior  known  set  of  malfunctions  terminating  in  N,  that  is,  N  is  the  catastrophic 
or  absorbing  malfunction,  N  will  have  a  conditional  onset  rate  different  after 
N-2  or  for  that  matter  any  malfunction  (N-i)  occurs.  The  best  estimate  of  such 
onset  rates  will  depend  on  the  preconceived  and/or  demonstrated  influence  of  the' 
occurrence  of  the  particular  (N-i)  on  malfunction  N.  This  influence  will  likely 
be  inconveniently  variable  or  non- stationary,  that  is,  its  magnitude  will  change 
with  time  and  transition  state.  However,  if  the  state  influences  are  so  taken 
as  to  sensibly  approximate  stationarity,  then  any  particular  malfunction  (N-i) 
starts  a  constantly  deteriorating  process  which  terminates  in  malfunction  N.  The 
waiting  time  to  catastrophe  can  be  counted  down  by  observing  the  transition  time 
between  any  two  successive  events,  and  the  deterministic  motion  of  waiting  time 
to  safety  begins  to  emerge  from  a  complex  background. 

As  we  have  noted  before,  we  should  expect  that  available  data  and  opera¬ 
tional  requirements  will  not  allow  convenient  outcomes  of  stationarity.  However, 
state  influences  may  be  grouped,  or  jumped  across  inconvenient  levels,  (in  this 
way  we  may  more  smoothly  approximate  any  deteriorating  process  at  the  cost  of 
complicating  the  reference  concept  of  simple  stationarity) .  Now  if  the  variously 
obtained  indications  of  influence  on  malfunction  N,  that  is,  N  (N-i),  i  =  1,2,3, 
are  ordered  and  grouped  in  levels  with  respect  to  their  best  estimated  conditional 
onset  rates,  we  gain  an  infinitely  improved  position  over  the  isolated  event  or 
Poisson  situation.  We  are  now  enabled  to  observe  respectable  cues  and  verifying 
sequences  relevant  to  decisions  anticpating  malfunction  N.  Such  is  the  basic  con¬ 
cept  of  malfunction  sequence  monitoring,  to  be  implemented  in  an  on-board  mal¬ 
function  warning  display  (MWD) .  Figure  21  presents  a  schematic  drawing  of  this 
MWD  concept. 

In  the  proposed  on-board  oriented  concept,  the  aim  is  to  most  gainfully 
integrate  the  human  complex  into  a  functional  man/machine  escape  system.  To 
properly  implement  the  concept,  the  details  must  preserve  the  uninhibited  function- 
in*;,  of  designated  human  command  elements  in  the  outer  emergency  loops  of  command 
and  control,  while  still  providing  practical  monitoring  of  mission  progress  or 
inner  functional  status  of  the  vehicle. 

Onboard  the  functional  status  of  the  vehicle  will  be  indicated  by  simple 
light  dropouts  and  turn-ons,  reflecting  caution,  holding,  warning  status,  and 
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Figure  21  ! Mifune  ion  Warning  Display  -  Concept  Schematic 
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command  and  alterations  audio-visual  cues,  sequences.  The  abort  and  escape 
parameter  criteria  themselves  will  depend  on  vehicle  systems  hazards  analysis 
and  criticality  during  countdown,  flight,  individual  stage  operation,  problem 
degradation  and  decision  window  size. 

There  are  many  times  during  the  operation  when  automatic  initiation 
is  unnecessary,  cr  unjustified,  because  the  time  available  for  better  decisions 
and  the  availability  of  emergency  capability.  During  other  times  automatic  ini¬ 
tiation  is  mandatory,  because  the  time  between  certain  malfunctions  and  vehicle 
loss  are  shorter  than  human  decisive  action.  The  notion  of  a  decision  window 
and  its  including  parameter,  "waiting  time  to  expected  safety"  is  introduced 
in  Figures  22  and  23* 


FIGURE  22  -  PRINCIPAL  COMPONENTS  OF  WAITING  TIME  TO  EXPECTED  SAFETY 
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Figure  22  presents  the  principal  components  of  waiting  time  to  ex¬ 
pected  safety  after  a  malfunction  has  been  indicated.  A  more  detailed  time  se- 
queaced  arrangement  of  these  elements  of  waiting  time  to  expected  safety  is  given 
in  Figure  23.  The  proposed  decision  window  is  that  period  of  time,  D  between  mal¬ 
function  verified  at  t(x)  and  the  tiros  of  the  last  possible  pre-escape  command  act 
necessary  to  effect  the  required  escape,  t(A) .  When  the  available  decision  window 
closes  (D  =  0)  at  t  (A),  escape  is  automatically  initiated.  Figure  23  indicates 
provisions  for  automatically  inhibiting  the  separation  of  one  capsule  if  it  is 
contingent  upon  the  prior  separation  of  the  other  capsule.  The  implementation 
of  such  an  inhibiting  characteristic  ir.  any  specific  system  is  not  conceived  as 
a  problem. 


t(o)  t(x)  t(A)  t(S) 


.Orientation. 

.Verification  . 

Decision 

Window 

Auto 

.Initiate  _ 

Auto 

Inhibit 

.  B  Escape  ^ 

Time 

C  Time  * 

‘aib  9 

*  B  9 

Transit  Time 

k - An  Escape  Transit  Time  — ij 

r 

Model 

Decide 

Analyze 

t(o)  =  Time  of  malfunction  indicated 
t(x)  =  Time  of  malfunction  verified 
t(A)  -  Time  of  escape  initiation 
t(S)  =  Time  of  expected  safety 


FIGURE  23  -  ELEMENTS  OF  WAITING  TIME  TO  EXPECTED  SAFETY 


The  size  of  the  decision  window,  D,  is  a  variable  contingent  upon  the 
particular  malfunction  under  consideration.  The  value  of  D  will  determine  the  re¬ 
quirements  for  automatic  detection  and  escape  initiation  backup.  Under  certain 
circumstances  the  commander  should  be  provided  with  automatic  backup  as  en  option. 
Figure  2h  6huws  proposed  decision  window  backup  provisions. 

After  vehicle  takeoff  or  launch  the  vehicle  commanders  preselected 
option,  which  is  indicated  in  Figure  2h  as  AUTO  ENABLE  and  provides  for  EJECT 
(AUTO  ENABLED),  may  be  enacted.  The  COMMAND  ENABLE  refers  to  the  provision  for 
command  type  decisions,  i.e.,  decisions  from  a  different  command  post,  e.g., 
ground  facilities.  This  option  will  most  likely  be  enacted  immediately  after 
vehicle  escape  system  arming  on  the  pad.  The  decision  window  of  course  is  prin¬ 
cipally  backed  up  with  MANUAL  for  EJECT  (MANUAL  OVER  AUTO)  beginning  with  vehicle 
escape  system  arming.  Obviously,  the  available  decision  window  closes  with  any 
event  of  escape  initiation  prior  to  D  =  0. 
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START 
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Command 
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t(o) 
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t(T=0) 

=  Time 

t(x2) 

=  Time 

EJECT  (Manual) 


D=0 


FIGURE  24  -  PROPOSED  PROVISIONS  FOR  DECISION  WINDOW  BACKUPS 


The  decision  that  any  available  decision  window  will  be  "waited  out" 
is  a  privilege  belonging  solely  to  the  commander.  His  decision  will  be  based  on 
his  appraisal  of  the  likelihood  that  additional  information  in  the  waiting  time 
might; 


1.  Allow  recovery  of  the  failing  mission  and  the 
difference  in  the  consequences,  or 

2.  Make  a  manual  over  automatic  pre-empt  of  action 
more  unalterably  advisable. 

Manual  overrides  of  the  short  decision  windows  associated  with  EJECTION 
IMMINENTS  (D  <5  seconds),  will  be  almost  certainly  restricted  to  alternative  (2) 
above.  During  the  more  frequently  occurring  decision  windows  of  D  >  5  seconds, 
manual  overrides  will  predominantly  include  those  of  alternative  (1)  above. 

It  is  this  availability  of  a  decision  window  in  many  malfunction  cir¬ 
cumstances  which  makes  the  concept  of  malfunction  sequence  monitoring  possible. 

After  on-board  vehicle  escape  system  arming,  it  is  proposed  that  the 
commander  monitor  malfunction  characteristics  through  the  time  sequenced  Malfunc¬ 
tion  Warning  Display,  NWD,  presented  schematically  in  Figure  25*  Prior  to  the  t 

emergency  level  of  EJECTION  IMMINENT,  the  commander  will  operate  through  the  X- 
button,  y  light,  coded  command/operations  status  keyboard.  Subsequent  to  EJECTION 
IMMINENT  the  MWD  serves  as  a  status  display.  The  MWD  consists  of  status  operators 
and  indicators  (center),  command  operators  and  indicators  (left)  and  an  operations 
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cue  and.  malfunction  sequence  ''tree”  (right).  Figure  25  shows  the  hWD  abbreviated  on 
its  right,  i.e.,  with  only  one  typical  "branch"  ret  of  malfunction  sequences  and  cues 
for  a  hypothetical  VTOHL  shown.  For  the  same  vehicle  a  more  complete  likely  opera¬ 
tions  cue  and  malfunction  sequence  "tree"  is  shown  in  Figure  26.  The  principal  mathe- 
mtical  concepts  necessary  to  the  evolution  of  this  "tree"  concept  are  presented  in 
Appendices  1  and  2. 

Although  presented  for  a  VTOHL  vehicle  vhe  NWD  concept  is  also  applicable 
to  HTOL  vehicles.  In  application  to  specific  vehicles  the  principal,  differences  would 
be  in  the  operation  cues  presented  on  the  right  side.  As  conceptually  visualized  an 
hi/D  would  be  located  in  each  crew  compartment  and  designed  so  that  the  second  stage 
could  monitor  first  stage  performance  prior  to  staging  and  its  own  performance  after 
staging. 


During  the  course  of  comnand,  operations,  verification  or  error  prior  to 
EJECTION  IMMINENT,  the  command/ope rations  status  lights  (center  board )  and  cue  lights 
ty  will  guide  trie  ccui.. j_ndc .  *•«.  uit  Lime  a  vusumund  Is  acknowledged ,  nr  Vr»ard 

initiated,  the  responding  commander  pushes  the  appropriate  operator  status  button. 

The  associated  routine -option  g"oup  located  on  the  left  will  be  enabled,  allowing  an 
exchange  of  inputs  to  be  fed  automatically  or  otherwise  between  the  two  command  posts. 

The  objective  of  the  upper  part  of  the  status  and  cue  portion  of  the  dis¬ 
play  (EJECTION  IMMINENT  to  t(A)  is  to  provide  the  best  information  regarding  the  size 
of  the  decision  window.  Operation  during  this  period  is  restricted  to  the  option  of 
a  manual  pre-empt  of  the  automatic  ejection  sequence.  The  selection  of  this  option 
by  the  commander  would  depend  upon  the  way  in  which  the  EJECTION  IMMINENT  emergency 
status  was  developed  as  given  by  the  cues  on  the  right. 

The  interval  from  D  =  5  to  D  =  2  is  classifl  d  at  the  emergency  level 
of  EJECTION  IMMINENT.  The  interval  from  D  =  2  to  D  =  0  is  the  EJECT  level.  It  is 
proposed  as  a  design  objective  that  the  off-board  command  decision  of  EJECTION 
IMMINENT  occur  no  later  than  D  =  5.  An  on-board  EJECT  lerel  of  2  seconds  is  proposed, 
since  this  is  approximately  the  minimum  time  interval  in  which  a  cue  could  be  recog¬ 
nized  and  manual  initiation  affected.  It  is  noted  that  a  commanded  automatic  eject 
is  also  possible  in  this  time  period. 

The  on-board  developments  following  the  time  of  EJECTION  IMMINENT  status 
are  shown  in  Figures  27  and  28.  Figure  27  presents  the  developments  for  EJECTION 
IMMINENT  developed  by  an  on-board  x-onset  cue  indicated  on  the  right  side  of  the  MWD. 
Depending  on  the  nature  of  the  cue,  one  of  the  on-board  -4,  or  3  second  EJECTION 
IMMINENT  countdowns  begin.  The  countdown  continues  in  real  time  unless  a  further 
overriding  cue  develops  or  a  commanded  automatic  eject  occurs.  In  the  case  of  an 
overriding  cue  the  count  is  autoshifted  down  to  a  lower  valu;  followed  by  immediate 
manual  ejector  automatic  ejection  override  at  D  =  0.  If  during  an  on-board  developed 
EJECTION  IMMINENT  status  a  commanded  EJECTION  IMMINENT  occurs,  the  count  is  auto¬ 
shifted  to  D  =  2  since  the  situation  has  degraded. 

Figure  28  presents  the  developments  subsequent  to  EJECTION  IMMINENT 
started  by  a  command  x-onset  cue  developed  in  command  channels  and  communicated  to 
the  on-board  comnander.  This  situation  begins  the  on-board  five  second  EJECTION 
IMMINENT  countdown.  The  countdown  continues  in  real  time  unless  an  overriding  cue 
develops.  In  this  event  the  subsequent  developments  are  the  same  as  discussed  for 
on-board  developed  EJECTION  IMMINENT. 

Figure  29  sunmarizeB  the  sequence  of  events  and  emergency  levels  lead¬ 
ing  to  the  EJECTION  IWCNENT  status. 
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It  is  significant  at  this  point  to  aunmarize  the  information  pre¬ 
sented  above  on  the  use  of  sensed  information.  The  unique  problems  with  regard 
to  the  use  of  sensed  information,  introduced  by  the  concept  of  two  separated  crew 
compartments,  could  have  been  answered  on  the  simplest  level  by  stating  that  the 
sensed  information  should  be  supplied  to  a  warning  and  initiation  system  which 
would  affect  escape  for  two  compartments  rather  than  one  or  at  least  one  in  the 
event  of  escape  system  failure  in  the  other.  As  such  the  problem  reduces  to  a 
systems  design  problem. 

In  the  present,  investigation  the  flexibility  and  decision  making  capa¬ 
bility  of  man  has  been  introduced  into  the  system,  necessitating  a  more  detailed 
analysis  in  order  to  provide  data  for  the  ec tablishment  of  jurisdiction,  Man  has 
been  introduced,  not  as  a  replacement  to  an  automatic  escape  system  but  in  the 
combination  of  selective  auto.atic  control  and  parallel  human  effort. 

With  man  in  the  system,  control  display'  equipment  becomes  significant. 
The  existence  of  finite  malfunction  onset  rates  was  used  as  the  principle  on  which 
a  concept  of  malfunction  sequence  monitoring  was  based  and  implemented  in  an  on¬ 
board  malfunction  warning  display,  1#*TD .  The  KWD  serves  as  both  a  passive  malfunc¬ 
tion  and  emergency  status  display  and  as  an  active  command  center  for  crew  safety. 
As  conceptually  envisioned,  similar,  if  not  identical,  displays  would  be  locate  5, 
in  each  crew  compartment.  Since  the  WD  is  a  time  sequenced  display  designed  tc 
rapidO.y  orient  the  man  to  the  problem,  this  arrangement  permits  the  maximum  use 
of  the  mail  in  the  plural  compartment  problem.  Prior  to  staging,  first  stage  per 
formance  will  be  monitored  in  both  stages.  During  the  staging  maneuver,  however, 
it  will  be  necessary  to  supply  information  on  fast  onset  malfunctions  in  each 
stage  to  each  crew  compartment.  After  completion  of  the  staging  maneuver,  each 
stage  will  monitor  only  its  own  status. 

The  function  of  any  crew  escape  device  is  the  implementation  of  crew 
safety.  Crew  safety  is  a  quantitative  design  parameter  and  requires  design  trad'.- 
offs  in  mission  performance  and  expected  mortality  rates.  The  evaluation  of  a  ’new 
escape  device  introduces  the  notion  of  the  value  of  a  human  life  which  is  beyund 
the  scope  of  the  present  general  study.  In  this  study,  therefore,  evaluation  is 
limited  to  a  qualitative  evaluation  and  comparison.  The  parameters  generally  con¬ 
sidered  in  an  evaluation  of  escape  devices  are:  l)  procedure  complexity,  2)  relia¬ 
bility;  3)  weight;  b)  effect  on  vehicle  performance;  5)  development  time;  and  6) 
cost. 


In  this  section,  the  concern  is  with  evaluation  of  warning  and  initia¬ 
tion  devices  which  use  sensed  data.  In  addition  to  variations  on  the  proposed  manual/ 
automatic  system,  there  are  the  fully  manual  system  and  the  fully  automatic  system. 

For  evaluations  to  be  practical,  an  attempt  should  be  made  to  keep  the  mission  ob¬ 
jectives  foremost  in  mind.  Conventionally,  we  define  mission  objective  as  the  aim 
of  an  operation.  Mission  objectives  themselves  may  be  said  to  vary  widely  -  from 
simple  to  complicated,  indicating  their  involvement  of  contemporary  and  advanced 
technologies.  On  these  terms,  the  present  advanced  concept  hypersonic  aerospace 
mission  is  not  a  simple  objective,  but  rather  a  complicated  requirement  mission. 

Given  the  operational  requirement  as  the  advanced  concept  aerospace 
.launch  vehicles,  the  comparative  evaluation  presented  in  Table  8  has  been  prepared. 


63 


FDL-TDR-64-145 


TABLE  8 

EVALUATION  AND  COMPARISON  OF  ESCAPE  INITIATION  SYSTEMS 


Procedural  Complexity 

Reliability 

Weight 

Effect  on  Vehicle  Performance 

Development  Time 

Cost 


Least  . - 1  - . .  Most 

All  Auto  "  »  Man/Auto  — —  m  All  Man 

All  Auto  — —  »  All  Man  . . . — »  Man/Auto 

Man/Auto  —  All  Auto  or  All  Man 

All  Man  - —  Man/Auto  . —-All  Auto 

Man/Auto  *  All  Auto  or  All  Man 

Man/Auto  ■  1 1 . .  (All  Man)  *  All  Auto 


Complexity  is  used  in  the  most  general  sense  here;  that  is,  complexity 
is  that  undefinable  quality  that  makes  for  difficulty  in  solution,  understanding 
and/or  operation.  Procedural  Complexity  is  restricted  here  to  mean  inflight  operat¬ 
ing  procedural  complexity  only,  that  is,  checkout  and  preflight  procedures  have 
been  excluded  from  the  consideration.  Such  a  restriction  is  viewed  as  properly 
oriented  to  the  advanced  concept  vehicles  under  consideration. 

Reliability  is  defined  as  the  probability  that  the  successfully-started 
system  will  complete  operation  for  a  specified  time  without  failure,  under  stated 
conditions.  The  consideration  of  reliability  of  the  escape  system  includes  Bystem 
opportunity  to  generate  inadvertent  escapes  and  to  not  sense  real  catastrophes.  In 
simple  missions  with  perfect  recovery,  the  inadvertent  escapes  may  be  tolerable  and 
the  unsensed  catastrophes  unlikely.  However,  as  the  missions  get  more  complicated 
(advanced)  the  attendant  likelihood  of  unsensed  catastrophes  presents  a  considerable 
loss  in  life  and,  even  with  perfect  recoveries,  inadvertent  escapes  present  mission 
inconsistencies  in  coots  of  fail’ire  ard  costs  of  repair  or  maintenance  of  worthwhile 
program  objectives.  The  all  automat!  '  .scape  system  as  a  system  most  typifies  the 
foregoing  considerations.  It  will  lack  the  flexibility  necessary  to  practically 
prevent  both  inadvertent  escapes  and  unsensed  catastrophes  for  advanced  objectives 
of  mission  and  crew  safety. 

Weight  is  taken  in  the  ordinary  sense,  that  is,  in  units  of  ponderable 
mass,  the  property  of  matter.  In  assessing  the  weight  consideration,  practically, 
the  weight  of  man  is  excluded  -  he  is  going  to  make  the  trip  regardless.  The  manual/ 
automatic  system  would  weigh  less  than  the  all  automatic  system  since  man  would  be 
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doing  certain  required  functions  which  can  be  duplicated  only  by  additional  weight 
in  an  all  automatic  system.  The  manml /automatic  system  is  said  to  weigh  less  than 
ths  all  manual  system  because  the  all  manual  By stem  is  considered  impracticable  for 
the  at-hand  mission  objective. 

The  term  vehicle  performance  is  taken  as  expressing  vehicle  capability. 
Vehicle  capability  is  variously  degraded  by  weights  and  sizes  of  the  encumbering 
system  and/or  its  necessary  vehicle-bome  adjuncts.  The  functional  interference 
or  interaction  of  mechanical  sensors,  tubing,  wiring,  mounting,  etc.,  necessary 
to  make  a  system  all  automatic  deteriorates  vehicle  capability.  Also,  the  irreducible 
probability  of  inadvertent  interaction  by  inevitable  adverse  failure  modes  can  be  con¬ 
sidered  to  degrade  vehicle  averaged  capability. 

Development  Time  is  defined  conventionally.  It  is  that  time  required 
for  operations  analysis  (conceptual),  system  design  (definition),  hardware  design, 
hardware  prototypes,  test  and  evaluation  as  a  function  of  product  effectiveness, 
i.e.,  performance,  reliability,  maintainability,  safety,  etc.  Here  it  has  been 
plainly  assumed  that  the  all  manual  system  is  infeasible  for  first  generation  at-hand 
concept  vehicles.  Further,  the  all  automatic  simulation  of  man's  flexibility  is  also 
unlikely  in  the  time  allocable  to  the  development  of  a  dual  concept  compromised 
system. 


Cost.  Cost  is  here  defined  in  the  practical  terms  of  acquisition  and 
ownership.  Acquisition  cost  is  the  cost  for  development  and  production.  Ownership 
cost  is  system  lifetime  cost  of  optuuniug  anil  maintaining  the  system,  including  the 
external  cost  of  its  failures.  Con.:ideriu_;  reliabilities  and  development  times  as 
developed  above,  the  all  automatic  system  (because  of  ownership  costs)  is  rated  most 
costly.  The  manual/automatic  system  becomes  least  costly  on  the  basis  of  both  acqui¬ 
sition  and  ownership  costs.  The  all  nanur-l  system  cost  would  turn  out  to  be  a  lucky 
compromise  indeed,  if  it  should  turn  out  .iome where  in  between. 

Jurisdiction  and  Precedence.  It  has  been  previously  indicated  that  one  of  the  prob¬ 
lems  of  escape  initiation  is  jurisdiction  This  is  not  unique  to  the  concept  of 
separated  crew  compartments  in  an  advanced  aerospace  vehicle  but  i3  made  more  com¬ 
plex  by  this  situation. 

Jurisdiction  is  defined  as  the  lawful  right  to  hear  and  determine  a 
cause  or  causes.  Accordingly,  precedence  is  proposed  to  give  jurisdiction  an  opera¬ 
tional  quality.  Wherever  more  than  one  abort  right  or  authority  is  set  forth,  pre¬ 
cedence  establishes  the  conditional  jurisdiction,  priority  or  order. 

Figure  30  presents  the  general  premises  of  the  proposed  jurisdictional 
and  precedence  concept.  The  likely  absolute  and  conditional  abort  comnand  posts 
are  identified  in  the  thus  far  developed  manned  vehicle  surrounding,  that  is,  with 
respect  to  the  information  in  the  Venn  diagram  of  possible  command  posts  presented 
in  Figure  20,  and  added  likely  mission  events  for  a  hypothetical  VTOHL  vehicle.  A 
VTOHL  vehicle  was  selected  for  presentation  since  it  is  envisioned  to  have  more 
possible  coiinand  posts  tlian  an  HTOL  vehicle .  An  ITTOL  vehicle  can  be  likened  to  an 
airplane  in  that  it  would  be  maneuverable  from  takeoff  and  would  most  likely  be 
under  manual  control.  Consequently  the  number  of  off-board  or  ground  comoand  posts 
would  be  smaller  said  their  period  of  control  shorter. 

Based  on  the  definitions  of  Jurisdiction  and  procedure  given  above,  it 
is  proposed  that  jurisdiction  be  conceptually  equal  in  both  crew  compartments  as 
indicated  in  Figure  31.  This  concept  maximizes  emergency  flexibility  and  response. 
After  vehicle  escape  system  arming  and  prior  to  separation,  however,  the  Jurisdiction 
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TYPICAL  MISSION  EVENT.  ACTION: 
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LL  »  Landllne;  RAD  «  Radio;  MAR  »  Manual;  AUTO  -  Automatic;  REQ  «  Request 
Single  cumber  entries  denote  proposed  absolute  jurisdictions. 

Mil  ti  pie  numbered  entries  denote  proposed  conditional  Jurisdictions. 

Only  single  numbers  end  denominators  denote  precedence  In  common,  e.g., 

3/ (2,1)  means:  nils  Jurisdiction  contingent  on  the  absolute  Jurisdictions 
designated  in  this  row  as  2  or  1 . 


Fig.  30  Preliminary  Oiidelines  of  Jurisdiction  and  Precedence  for  Abort  Co^and  of 
Separate  Crew  Compartment  Space  Vehicles 
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of  the  su'd  ordinate  compartment,  B,  is  operationally  conditional  and  subject  to 
precedence  vested  exclusively  in  the  mission  designated  vehicle  commander,  A. 
Since  it  has  been  proposed  that  similar  valuing  systems,  MWD,  be  located  in  each 
compartment,  with  the  second  stage  monitoring  first  6tage  perfo nuance,  prior  to 
stage  separation,  the  designated  commander  for  any  given  mission  could  be  either 
in  the  first  or  second  stage . 


Figure  32  presents  some  details  regarding  emergency  level,  display 
information,  and  escape  initiation.  Figure  32  develops  the  circumstances  of 
precedence  in  the  following  manner. 

The  notes  ehovn  on  the  figure  set  forth  the  definitions  of  tne  key 
time  parameters  used.  Time  is  real  time  measured  from  a  considered  point  in  time, 
t,  prior  to  or  at  the  time  of  the  escape  initiation  act,  t(A) .  Hole  A  defines  t 
and  t  variables  which  denote  the  time;  interval  between  a  considered  point  in  time 
and  escape  initiation.  Note  B  identifies  the  available  decision  window  as  D. 
where  t  >  0.  Note  C  designates  the  time  of  the  escape  initiation  act  as  t(A), 
where  t(&)  may  either  be  a  manual  or  automatic  initiation.  Note  D  sets  forth 
t(AUTO)  as  the  time  of  automatic  escape  initiation,  where  t(AOTO)  will  be  equal 
to  or  less  than  t(D  =  0).  Note  E  designates  the  time  of  manual  escape  initiation 
as  t(MAN)  where  t(MAN)  will  be  equal  to  or  leBS  than  t(AUTO). 

The  left  side  of  Figure  32  lists  the  possible  "responsible  operations" 
of  the  proposed  concept  in  terms  of  hazard  information  evaluation  and  initiating 
command  post.  The  hazard  information  listing  is  time  ordered,  i.e.,  entries  be¬ 
gin  with  the  smallest  value  of  f  (representing  the  most  urgent  emergencies)  and 
develop  downward  to  times  equal  to  t(o),  recognized  as  the  time  of  the  first  indica¬ 
tion  of  a  least  urgent  emergency  level  malfunction.  The  column  entitled  EMERGENCY 
LEVEL  indicates  the  associated  designations  as  developed  previously.  The  adjacent 
column  to  the  right  entitled  INITIATING  CP  merely  designates  the  command  post,  (CP), 
initiating  the  emergency  level  as  being  on  board  or  off  board. 

The  remaining  section  of  Figure  32  indicates  the  conceived  on-board 
energency-oriented  particulars.  All  the  entries  except  the  first  two  under  the 
column  entitled  "OPTION  OPEN"  are  identifiable  to  the  commander's  keyboard  on  his 
imlfunction  warning  display  (MWD) .  (The  exceptions,  NONE  and  MANUAL  EJECT,  are 
prior  understood  options  available).  Clearly,  there  is  no  option  open  to  the 
commander  on  item  one  of  Figure  32  and  in  item  2,  the  comnander'  s  left  hand  will 
be  off  the  board,  grasping  the  eject  handle. 

Under  the  column  in  Figure  32  entitled  "TYPE" ,  either  one  of  two  en¬ 
tries  " COMD"  or  "OPUS"  is  listed.  The  entry  "COMD"  (Ccwmand),  is  identifiable  to 
the  MWD  left,  and  the  entry  "OPNS" ,  (Operations),  to  the  MWD  right,  consistent  with 
all  notions  developed  above .  The  adjacent  column  to  the  left,  entitled  '  WINDOW 
lists  the  on-hoard  decision  window  count  intervals  identifiable  to  the  MWD,  center. 
The  adjacent  column  on  the  right  i  nil  cates  the  options  which  are  open  to  the  com¬ 
mander. 


During  ABORTS,  and  ABORT  IMMINLNTS,  the  comnander  will  find  it  neces¬ 
sary  to  acknowledge  and  direct  time  and  attention  consuming  options  and  exercises. 
For  unknown  rate  or  fast  degenerating  ABORTS,  inter- compartment  options  should  most 
likely  involve  acknowledgements,  enables,  responses  and  disables  by  WIRE  COMMAND 
as  noted  in  Figure  31,  rather  than  the  relatively  more  cumbersome  audio  ccanaod 
address.  On  the  other  hand,  during  the  more  slowly  degenerating  ABORTS,  or  ABORT 
IMMI NEWTS,  the  AUDIO  CGMMD  option  will  most  likely  be  required  to  handle  to  situa¬ 
tion  complexitie s  of  problem  address  and  detail  lengtn . 
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During  ABORTS  and  ABORT  IMMINENTS,  the  spatiui  orientation  and  flow 
of  commander  visual  and  left  hand  manual  action  with  respect  to  the  MriD  is  con¬ 
ceptually  generalized  by  the  diagram  in  Figure  33. 


Urgency 

Option 

FIGURE  33  -  GENERAL  CONCEPT  OF  COMMANDER  VISUAL  AND 
LEFT  HAND  MOTION  WITH  RESPECT  TO  J-WD 

The  ABORT  (to  EJECT)  level  REQUEST-  SOP  option  is  proposed  for  com¬ 
mander  use  in  unknown  rate  or  fast  degenerating  ABORTS.  The  commander  requests 
the  response  compartment  to  furnish  by  viie  a  SEAT  OF  PANTS  emergency  level  de¬ 
cision  (i.e.,  a  decision  in  less  than  two  seconds  under  conditions  of  no  advance 
cue)  ■ 


The  commander  may,  in  some  related  instances  of  time  and  peculiar 
urgency,  direct  the  "REQUEST  CUE"  option.  Here  the  response  compartment  has  two 
seconds  to  flash  his  latest  received  most  important  cue.  The  flashing  would  appear 
on  the  commander's  WD,  right,  or  operations  malfunction  and  sequence  "tree"  for 
the  duration  of  the  option.  The  commander  may,  in  some  follow-on  instances  to  the 
foregoing  or  in  cases  of  peculiar  urgency,  direct  "the  "SHARE  BOGEY"  option.  Here 
response  compartment  decisions  for  EJECTION  IMMINENTS  or  EJECTS  would  be  enabled 
as  having  commander  authority  for  the  duration  of  the  option. 

The  ABORT  IMMINENT  level  COMD  EXERCISE  STANDBY  option  is  announced 
via  AUDIO  (KF)  command  channel  by  the  commander  upon  receiving  an  off-board  ABORT 
IMMINENT  when  his  immediate  attention  is  required  by  seme  other  more  important 
on-board  task.  In  appropriate  follow-on  instances  to  the  foregoing  the  COMb  EX¬ 
ERCISE  START  option  is  announced  (via  the  AUDIO  (KF)  command  channel)  and  indicated  r 

by  the  commander's  subsequent  operation  of  the  COMD  EXERCISE  START  indicator  button.  x 
Any  subsequent  EXERCISE  CANCELLED,  AUDIO  DETAIL  or  DE'IAIL  CANCELLED  option  is  an¬ 
nounced  via  the  AUDIO  (RF)  command  channel  and  indicated  by  the  consnander’ s  opera¬ 
tion  of  the  appropriate  indicator  button.  Acknowledgment  of  these  options  by  the 
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responding  compartment  would  be  made,  e.g.,  responder  pushes  appropriate  button 
in  his  compartment  oar  'ug  a  flashing  of  the  corresponding  buttou  on  the  com¬ 
mander's  f4fD.  Upon  r  Ipt  of  acknowledgment  oi'  a  cancellation  the  comaander 
can  then  clear  the  option  channels  for  future  use  - 

In  the  remaining  section  of  Figure  32  we  observe  that  the  OTTION 
INITIATOR  except  for  item  1,  is  always  the  cotxtarder,  COMDR,  and  that  his  escape 
initiation  act  is  always  MANUAL.  In  the  right-most  column  entitled  "I KECEDENCE" 
we  note  ttiat  any  WIRE  or  AUDIO  COtfffl  or  Problera/Skill/Response/Orientec  (PSRO)  ini¬ 
tiation-terminating  acts  must  be  created  by  an  option  of  the  commander,  and  as  such 
remain  for  the  duration  of  the  option  as  subject  to  commander  absolute  manual  pre¬ 
cedence  or  override. 

Since  the  staging  maneuver  introduces  certain  sequencirg  peculiarities 
which  will  be  discussed  in  the  next  section,  it  is  proposed  that  the  auto  eject 
system  have  precedence  during  this  maneuver. 

Summarizing  the  jurisdiction  and  precedence  discussion  it  has  been 
shown  that  both  vehicle  and  ground  command  posts  have  jurisdiction,  defined  as 
authority,  and  therefore  it  was  necessary  to  establish  precedence  or  priority  of 
,j-.  r  sdiction. 


In  general,  as  the  vehicle  becomes  airborne  the  precedence  goes  from 
ground  command  posts  to  the  preselected  on-board  mission  cotnnander.  The  other  on¬ 
board  commander  has  precedence  only  at  the  option  of  the  mission  conmander.  Manual 
precedence  in  any  given  emergency  status  is  conditional  on  the  availability  of  a 
decision  window.  In  the  absence  of  a  decision  window,  auto  eject  has  absolute 
precedence . 

The  order  of  precedence  between  the  on-board  commanders  could  be 
established  either  by  a  "gentlemens'  agreement",  (both  capsules  would  be  armed 
and  eject  would  occur  if  the  manual  eject  button  were  pushed  in  either  stage),  or 
could  be  absolute  (manual  eject  circuit  of  secondary  compartment  must  be  activated 
by  mission  commander) .  There  are  advantages  and  disadvantages  associated  with  each 
possibility,  however,  it  is  believed  that  the  "gentlemens'  agreement"  approach  would 
be  the  most  satisfactory  especially  in  terms  of  crew  morale. 

6.2  SEPARATION 

detection  and  initiation  of  the  escape  sequence  the  escape 
capsules  trust  separate  from  the  aerospace  vehicle  and  attain  a  safe  environment 
from  which  a  recovery  can  be  made.  The  act  of  separation  actually  encompasses  two 
different  actions.  The  first  act  is  the  separation  of  the  physical  connections  be¬ 
tween  the  primary  vehicle  and  the  escape  capsules.  The  second  act  is  the  movement 
of  the  capsules  from  the  primary  flight  vehicle  to  a  safe  environment. 

The  first  act  of  separation,  that  of  severance  of  connections,  is  a 
mechanical  act  occurring  at  the  interface  and  hence  is  not  influenced  by  the  number 
of  escape  capsules.  Therefore,  the  physical  disconnect  phase  of  separation  was 
not  considered  in  the  present  study  and  only  the  separation  phase  from  disconnect 
to  safe  environment  was  investigated.  This  definition  of  separation  reduces  the 
separation  phase  to  strictly  a  flight  dynamics  problem. 

The  basic  problem  in  the  separation  phase  is  insuring  that  the  escape 
vehicle  is  placed  in  a  safe  flight  environment  without  exceeding  any  human  tolerance 
or  vehicle  limits.  This  safe  environment  is  iefined  as  one  in  which  the  capsule  has 
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sufficient  clearance  between  itself  and  the  other  escape  vehicle,  the  primary 
flight  vehicle  and  any  dangerous  blast  wave  from  an  explosion.  In  addition  to 
the  establishment  of  ba3ic  capsule  vehicle  separation  criteria,  applicable  to 
any  aerospace  vehicle  escape  capsule,  it  was  the  objective  of  thiB  investigation 
pnase  to  establish  criteria  in  regard  to  crew  comparomeut  location,  delay  time 
between  separation  of  each  capsule,  thrust  magnitude  and  direction  applicable  to 
aerospace  vehicles  having  two  separated  crew  compartments . 

Separation  characteristics  were  investigated  at  the  critical  areas 
defined  in  Section  4.4,  i.e.,  zero  zero,  hHgh  dynamic  pressure  and  high  Mach 
number. 


In  order  to  conduct  flight  dynamics  studies  it  is  necessary  to  nave 
information  on  the  aerodynamic  and  mass  properties  of  the  escape  capsules.  Since 
this  was  not  a  design  study,  it  was  necessary  to  assume  certain  characteristics. 
Both  ballistic  and  lifting-type  capsules  were  considered  since  the  type  of  escape 
capsule  could  affect  the  criteria  for  crew  compartment  location  and  separation  re¬ 
quirements.  The  capsule  models  used  were  those  presented  in  Figures  17  and  18  and 
discussed  in  Section  5*  Although  these  capsules  are  adapted  from  crew  escape 
studies  for  a  one-man  crew,  the  configurations  are  applicable  to  the  present  in¬ 
vestigation  since  the  trajectory  performance  is  a  function  of  such  non-dimensional 
parameters  as  thrust  tc  weignt  and  wing  loading. 

The  capsules  shown  in  Figures  1?  and  18  are  nose  capsules.  As  men¬ 
tioned  in  Section  5>  there  is  another  capsule  type  called  the  pod  cansulr .  Pod 
capsules  are  located  aft  of  the  nose  and  can  also  he  either  lifting  ur  ballistic 
types .  Pod  capsule  performance  differs  from  nose  capsule  performance  primarily 
in  thit  pod  capsules  are  more  influenced  by  aerodynamic  interference  effects  in 
the  initial  separation  phase.  Since  these  interference  effects  depend  primarily 
on  the  specific  geometric  configuiatlons,  a  quantitative  evaluation  of  these  effects 
is  beyond  the  scope  of  this  study.  In  a  specific  design  study  these  effects  would 
have  to  be  considered,  hevever,  for  the  present  study  it  can  be  assumed  that  the 
separation  trajectory  results  obtained  with  the  nose  capsules  are  also  applicable 
to  pod-type  capsules. 

In  the  separation  investigation  the  following  aspects  were  considered: 

1.  Separation  between  a  capsule  and  the  aerospace  vehicle 

2.  Separation  between  two  capsules 

3-  Explosion  separation  requirements 

4.  Crew  conv&rtment  location  criteria 

6.2.1  CAPSULE-VEHICLE  SEPARATION.  The  first  aspect  of  separation  considered 

was  the  separation  characteristics  between  a  capsule  and  a  vehicle.  This  informa- 
t -1  on  is  applicable  directly  to  single  crew  compartment  vehicles  but  Is  also  applic¬ 
able  to  the  individual  capsule  separation  characteristics  of  an  aerospace  vehicle 
having  two  crew  escape  capsules.  The  effect  of  the  following  parameters  on  separa¬ 
tion  characteristics  were  investigated: 

1.  Separation  rochet  thruBt  Magnitude  and  direction 

2.  Initial  flight  path  angle  and  angle  of  attack 

3*  Initial  velocity  and  altitude 
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6. 2. 1.1  Techniques.  The  separation  trajectory  characteristics  have  been  obtained 
using  a  three  degree  of  freedom  IBM  709C  digital  computer  trajectory  program.  The 
program  includes  the  vehicle  dynamics  in  the  pitch  plane  and  has  the  following 
significant  features: 

1.  Separate  capsule  and  control  surface  aerodynamic 
data  as  a  function  of  Mach  number  and  angle  of 
attack . 

2.  Escape  rocket  thrust  as  a  function  of  time  in¬ 
cluding  a  build-up  and  decay. 

3.  Autopilot  to  provide  damping  through  the  use  of 
either  reaction  controls  or  aerodynamic  surfaces. 

4.  Variable  mass,  inertias  and  c.g.  position  as  a 
function  of  expended  fuel  weight. 

5.  Thrust  as  a  function  of  time  with  a  specific  im¬ 
pulse  of  225  seconds. 

6.  Separation  distance  from  the  primary  vehicle  is 
obtained  by  assuming  the  primary  vehicle  continues 
along  its  initial  flight  path  at  its  initial,  velo¬ 
city. 

The  outputs  of  the  program  are  time  histories  of  position,  velocity,  angles,  and 
load  factor. 

6. 2. 1.2  Aerodynamic  Data.  The  more  significant  aerodynamic  lift,  drag,  and  moment 
characteristics  used  in  the  trajectory  program  are  presented  in  Figures  31*  and  35 
for  the  ballistic  capsule  and  lifting  body  capsule  respectively. 

6. 2. 1.3  Separation  Distance  Characteristics 

On  the  Pad .  On  the  pad  escape  determines  the  maximum  thrust  values  allowable  from 
human  tolerance  considerations  since  at  this  condition  there  are  no  relieving  aero¬ 
dynamic  forces  initially,  (the  same  reasoning  would  apply  to  orbital  escape).  The 
rocket  thrust  must  be  inclined  to  the  centerline  of  the  vehicle  for  both  VTOHL  and 
HTOL  vehicles.  In  the  VTOHL  the  Inclination  is  required  to  achieve  lateral  dis¬ 
placement  while  in  the  HTOL  it  is  required  to  achieve  sufficient  altitude  to  execute 
a  parachute  recovery. 

Figures  36  and  37  present  the  ballistic  body  resultant  separation  dis¬ 
tance  as  a  function  of  thrust  loading  (thrust/weight)  and  thrust  angle,  (measured 
from  the  centerline)  for  horizontal  and  vertical  take-off  respectively  at  an  ini¬ 
tial  velocity  of  zero.  As  would  he  expected,  the  higher  thrust  loadings  result 
in  the  larger  separation  distance.  The  results  show  that  decreasing  the  thrust 
angle  increases  the  separation  distance.  This  occurs  since  lower  thrust  angles 
yield  lower  initial  angles  of  attack  and  hence  lower  drag. 

Figures  38  through  4l  present  ballistic  body  separation  distance  as  a 
function  of  thrust  loading,  thrust  angle  and  burning  time  for  both  hoiizontal  and 
vertical  take-off  vehicles.  Extending  the  burning  time  of  the  rockets  result  in 
larger  separation  distances  between  the  escape  capsule  and  the  primary  flight  ve¬ 
hicle  . 
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FIGURE  34  -  BALLISTIC  BODY  AERODYNAMIC  DATA 


FIGURE  35  -  Lifting  Body  Aerodynamic  Dai 
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FIGURE  37  -  On  The  Pad  Separation  Distance  -  Ballistic  Body  -  Vertical  Take-Off 

Effect  of  Thrust  Magnitude  and  Direction 


FIGURE  38  -  On  The  Pad  Separation  Distance-  Ballistic  Body  -  Horizontal  Take-Off 

Effect  of  Rocket  Burning  Time 


FIGURE  39  -  On  The  Pad  Separation  I'istance  -  Ballistic  Body  -  Horizontal  Take-off 

Effect  of  Rocket  Burning  Time 


On  The  Pad  Separation  Distance  -  Ballistic  Body  -  Vertical  Take-off 
Effect  of  Rocket  Burning  Tide 
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FIGURE  ll  -  On  The  Pad  Separation  Distance  -  Ballistic  Body  -  Vertical  Take-off 
Effect  of  Rocket  Burning  Time 
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The  separation  distance  characteristics  fcr  the  lifting  body  capsule 
in  both  the  vertical  and  horizontal  take-off  positions  are  presented  in  Figures 
42  through  47  as  a  function  of  the  parameters  of  thrust  loading,  thrust  angle 
end  burn  time.  The  effect  of  variations  of  these  parameters  on  the  lifting  body 
separation  performance  were  similar  to  the  trends  established  for  the  ballistic 
body. 


Lover  values  of  thrust  loading  were  used  for  the  lifting  body  than 
for  the  ballistic  body  since  the  baLListic  body  would  have  higher  drag  at  the 
maximum  dynamic  pressure  condition  necessitating  higher  separation  forces. 

High  Dynamic  Pressure.  Maximum  dynamic  pressure  escape  determines  the  minimum 
thrust  values  required  to  achieve  separation  since  at  this  condition  the  air 
loads  opposing  separation  are  at  their  maximum.  The  high  dynamic  pressure  separa¬ 
tion  performance  characteristics  were  investigated  considering  the  range  of 
parameter  variations  shown  in  Table  9- 

Table  9  High  Dynamic  Pressure  Separation  -  Parameter  Kange 


Ballistic 

Body 

Lifting  Body 

Altitude  -  ft. 

27,000-80,000 

27,000-40,000 

Velocity  -  ft /sec. 

1C00 

1800 

Flight  path  angle  -  degrees 

5-60 

5  -  ^5 

Thrust  loading  - 

12.8-24 

8  -  14 

Thrust  angle  -  degrees 

20  -  40 

20  -  4o 

Wing  loading  -  lbs/sq.  ft. 

54  -  81 

22.7  -  34.1 

Nominal  rocket  burn  time  -  seconds 

1.0  -  2.0 

1.0  -  2.0 
_ _ 

The  effect  of  flight  ?ath  angle  eta  given  velocity-altitude  condi¬ 
tion  was  investigated  for  the  ballistic  body  aid  :ound  to  be  insignificant  and 
therefore  was  not  considered  in  the  lifting  body  ntudy. 

The  separation  distance  characteristics  as  a  function  of  time  for 
the  ballistic,  body  at  high  dynamic  pressure  are  presented  in  Figures  48  through 
54.  The  effect  of  thrust  loading  and  direction  on  separation  distance  is  pre¬ 
sented  in  Figures  48,  49  and  50  for  altitudes  of  27,000,  40,000  and  80,000  ft. 
respectively.  Thf  /:  suits  show  that  separation  distance  characteristics  improve 
with  increasing  altitude  at  constant  velocity. 

The  effect  of  wing  loading  on  separation  distance  at  various  thrust 
loadings  is  shewn  in  Figures  51  end  5 2  fo  •  altitudes  of  27,000  ft.  and  40,000  ft. 
respectively.  As  shown,  the  separation  distance  increases  with  wing  loading  ex¬ 
cept  at  27,000  ft.  altitude  and  a  thrust  loading  of  19*2,  where  a  wing  loading  of 
54  is  snown  to  be  better  than  67.5.  The  data  at  these  initial  conditions  is  un¬ 
realistic  since  the  thrust  is  not  sufficient  to  overcome  the  drag  and  the  separa¬ 
tion  distance  indicated  is  rarely  a  result  of  the  capsule  decelerating  from  a 
constant  velocity  primary  flight  vehicle.  The  criteria  for  positive  separation 
will  be  discussed  in  Section  6. 2. 1.4  below. 
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FIGURE  42  -  On  The  Pad  Separation  Distance  -  Lifting  Body  -  Horizontal  Take-Off 

Effect  of  Thrust,  Magnitude  and  Direction 
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FIGURE  44  -  0:i  The  Fad  Separation  Distance  -  Lifting  Body  -  Horizontal  Take-Off 
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Pig.  45  On  The  Pad  Separation  Distance  -  Lifting  Body  -  Horizontal  Take-off 
Effect  of  Rocket  Burning  Tine 
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On  The  Ffcd  Separation  Distance  —  Lifting  Body  —  Vertical  Take-off 
Effect  of  Rocket  Earning  Time 
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i  Separation  Distance  -  Lifting  Body  -  Vertical  Take-off 
Rocket  Euming  Tine 
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High  Dynamic  Pressure  Separation  Distance  -  Ballistic  Body 
Effect  of  Thrust,  Magnitude,  and  Direction 
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Fig-  50  High  Dynamic  Pressure  Separation  Distance  -  Ballistic  Body 
r'ffect  of  Thrust,  Magnitude,  and  Direction 


Dynamic  Pressure  Separation  Distance  -  Ballistic  Body 
:t  of  Thrust,  Magnitude,  and  Wing  Loading 
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The  results  of  increasing  the  separation  rocket  burning  time  are 
presented  in  Figures  53  and  5^  for  various  thrust  loadings.  As  expected,  the 
longer  burning  tiroes  result  in  the  greater  separation  distances.  Due  to  an  in¬ 
crease  in  initial  weight  (increased  fuel  load)  the  separation  distances  are  less 
at  the  start,  but  as  the  rockets  bum  longer  they  soon  boost  the  capsule  further 
away  from  the  primary  vehicle . 

The  results  of  the  lifting  body  at  high  dynamic  pressure  are  pre¬ 
sented  in  Figures  55  through  59-  The  lifting  body  results  show  the  same  trends 
as  the  ballistic  body  except  for  the  wing  loading  variation.  The  low  wing  load¬ 
ing  resulted  in  the  best  separation  performance  for  the  lifting  body  while  the 
high  wing  loading  was  best  for  the  ballistic  body.  This  can  be  attributed  to 
the  greater  effect  of  lift  with  a  lower  wing  loading. 

High  Mach  Number.  High  Mach  number  escape  is  not  critical  from  the  standpoint 
of  tt  its  requirements  or  separation  characteristics.  It  is  critical  however 
from  ^be  .tandpolnt  of  clearance  between  two  escape  capsules.  In  order  to  pre¬ 
sent  a  more  complete  set  of  separation  distance  characteristics,  hypersonic  separa¬ 
tion  data  has  oeen  adapted  from  the  studies  of  Reference  8  and  is  presented  herein. 
Figure  60  presents  the  separation  distance  characteristics  as  a  function  of  time 
for  the  ballistic  body  capsule,  indicating  the  effect  of  thrust  loading.  The 
separation  distance  characteristics  of  the  lifting  body  as  a  function  of  time  are 
presented  in  Figure  6l  showing  the  effects  of  thrust  loading  and  thrust  angle. 

6. 2. 1.1+  Separation  Criteria.  There  are  two  basic  criteria  applicable  to  the 
separation  of  a  capsule  from  a  vehicle.  These  are  that  the  accelerations  remain 
within  the  human  tolerance  limits  and  that  the  capsule  have  a  positive  separa¬ 
tion  force  at  maximum  thrust. 

Acceleration.  The  ability  of  a  human  body  to  withstand  accelerations  in  various 
directions  has  been  fairly  well  explored.  Figure  8  is  a  generalized  curve  that 
shows  these  tolerable  accelerations  versus  time.  These  data  have  been  used  as 
guidelines  for  human  tolerance  to  accelerations  during  this  escape  investiga¬ 
tion. 


Accelerations  during  an  escape  maneuver  arise  from  two  sources;  es¬ 
cape  rocket  thrust  and  aerodynamic  loads.  The  escape  rocket  thrust  is  critical 
at  zero-zero  escape  when  there  are  no  relieving  aerodynamic  forces.  At  these 
conditions,  the  thrust/weight  must  be  less  than  the  acceleration  limits  given  in 
Figure  8. 


The  aerodynamic  loads  are  critical  at  maximum  dynamic  pressure.  The 
critical  condition  is  generally  after  rocket  burnout  since  during  thrusting  the 
high  aerodynamic  forces  in  the  drag  direction  are  opposed  by  the  escape  rocket 
thrust  thus  reducing  the  load  factor.  At  burnout  the  resultant  aerodynamic  load 
factor  is  given  by 


where 


R  =  q  ^  |/T  ■+  (l/d)2 

W 

q  =  dynamic  pressure  -  lbs/sq.  ft. 

Cp  =  drag  coefficient 

S  =  reference  area  -  sq.  ft. 

W  =  weight  -  lbs. 

®  lift  to  drag  ratio 
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High  Dynamic  Pressure  Separation  Distance  -  Ballistic  Body 
Effect  of  Rocket  Burning  Time 


High  Dynamic  Pressure  Separation  Distance  -  Ballistic  Body  -  Eflect  of 
Rocket  Burning  Time 


IKK 


FDL-TDR -64-145 


lie  Free sure  Separation  Distance  -  Lifting  Body 
Thrust  Ifegnitude  and  Direction 
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Hypersonic  Separation  Distance  -  Ballistic 
Effect  of  Thrust  Magnitude 


Hypersonic  Separation  Distance  -  Lifting  Body 
Effect  of  Thrust  Magnitude  and  Direction 
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Figures  62  through  64  present  resultant  aerodynamic  load  factor  as  a 
function  of  dynamic  pressure,  lift-to-drag  ratio  and  drag  parameter  CjjS/w.  The 
maximum  allowable  load  factor  from  Figure  8  is  superimposed  on  these  figures.  This 
data  is  presented  to  be  used  only  as  a  guide  in  selecting  escape  capsule  aerodynamic 
characteristics . 


Separation  Force.  In  order  to  obtain  positive  separation  of  a  capsule  from  a  ve¬ 
hicle  it  is  necessary  to  have  a  positive  force.  The  maxi  mum  separation  force  is 
required  at  maximum  dynamic  pressure  when  the  air  loads  resisting  separation  are 
at  t.heir  maximum. 


It  vas  assumed  for  this  study  that  positive  separation  occurred  along 
the  body  longitudinal  axis.  Separation  in  other  directions  would  change  the  quan¬ 
titative  values  presented  but  not  the  qualitative  effects  of  the  various  parameters 
considered.  The  force  equation  along  the  body  axis  is  presented  below  for  an  accel¬ 
eration  of  zero: 


»•  *i 

=  T/w  cos  6  =  q  I  cos  a  -L/D  sin  cm  +  sin  (a  +>) 


where 

T  =  Thrust 

6  =  Thrust  inclination  to  centerline 

Cj,  =  Drag  Coefficient 
S  =  Reference  Area 
W  =  Weight 
q  =  Dynamic  pressure 
a  *  Angle  of  Attack 
L/D  =  Lift-to-drag  ratio 
y  =  Flight  path  angle 


The  effect  of  dynamic  pressure,  lift-to-drag,  single  of  attack,  flight 
path  angle  and  the  drag  parameter  CpS/w  on  the  separating  force  was  determined. 

The  results  are  presented  in  Figures  65  through  68  in  terms  of  a  thrust  parameter 
( thrust- to-weight  ratio  times  the  cosine  of  the  thrust  angle). 


6.2.1. 5  Summary.  This  data  on  capsule -vehicle  separation  which  has  been  dis¬ 

cussed  above  has  been  presented  in  this  report  on  crew  escape  for  two  stage  manned 
aeiospace  vehicles  to  serve  as  guidelines  in  selecting  the  geometric,  aerodynamic 
and  propulsion  characteristics  for  escape  capsules  for  use  in  two  stage  vehicles. 
The  data  has  been  presented  as  generalized  data  aud  should  be  used,  as  such. 


6.2.2  CAPSULE  -  CAPSULE  SEPARATION.  The  most  significant  problem  in  re¬ 

gard  to  escape  separation  characteristics  for  a  two  stage  aerospace  vehicle  with 
two  separated  crew  compartments  is  the  problem  of  collision  between  the  two  capsules. 
This  problem  was  investigated  considering  the  effect  of  variations  on  the  following 
parameters: 

1.  Separation  rocket  thrust  and  direction 

2.  Rocket  burning  time 

3-  Initial  separation  distance 

4.  Time  delay  between  initiation  of  escape 
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Acceleration  Criteria  -  Effect  of  Drag  Factor 


65  Separation  Criteria  -  Effect  of  Dynamic  Pressure  and  Drag  Factor 
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Fig  6?  SEPARATION  CRITERIA  —Effect  of  Angle  of  Attack 


FLIGHT  PATH  ANGLE  —  DEG. 


Separation  Criteria  -  Effect  of  Flight  Path  Angle 


6.2.2. 1  Techniques.  The  separation  distance  characteristics  between  two  capsules 
were  obtained  using  a  two  degree  of  freedom  trajectory  program.  This  program  was 
a  basic  two  degree  of  freedom  I9M  7090  point  trass  trajectory  program  modified  to 
compute  the  trajectory  characteristics  of  two  vehicles  and  determine  their  rela¬ 
tive  separation  distance.  Tdie  modifications  included  provisions  for  an  initial 
separation  distance  between  the  capsules  and  a  delay  time  between  escape  initia¬ 
tion. 

6. 2. 2. 2  Parameters.  The  program  described  above  was  used  to  compute  separation 
characteristics  as  a  function  of  the  parameter  variations  listed  on  Tables  11  and 
12  and  at  the  initial  flight  conditions  listed  in  Table  10. 

Table  10  Capsule  -  Capsule  Separation  -  Initial  Flight  Conditions 


Configuration 

Flight  Path  Angle 

Altitude 

Velocity 

Ballistic  Body 

5° 

27,000  ft. 

1,800  fps 

40° 

40,000  ft. 

1,800  fps 

»♦  tl 

15° 

177,000  ft. 

10,000  fps 

Lifting  Body 

5° 

27,000  ft. 

1,800  fps 

tf  f» 

^5° 

40,000  ft. 

1,800  fps 

ri  r» 

15° 

177,000  ft. 

10,000  fps 

Data  at  subsonic  specdo  was  obtained  using  the  ^apculc  vehicle  sepam 
tion  characteristics  discussed  in  Section  4.3.1. 

6. 2. 2. 3  Results.  An  analysis  of  the  large  number  of  computer  runs  which  were  made 
revealed  that  there  were  no  significant  problems  in  regard  to  collision  using  real¬ 
istic  values  of  the  parameters.  In  order  to  indicate  trends,  some  typical  results 
have  been  selected  for  presentation. 

Figure  69  presents  data  foi  two  ballistic  capsules  separating  from  an 
on-the-pad  condition  for  both  an  HTOL  (y  =  0°)  and  a  VTOHL  (y  =  90°)  launch.  The 
data  is  presented  in  the  form  of  separation  distance  between  the  two  capsules  as  a 
function  of  time.  The  effects  of  delay  time  and  escape  rocket  thrust  loading  are 
shown.  With  no  delay  time,  the  separation  distance  characteristics  remain  constant 
at  their  initial  value  since  the  capsule  characteristics  are  identical.  Increasing 
the  thrust  loading  increases  separation  distance  using  a  delay  time  of  0.2  seconds. 

Figure  70  presents  the  effect  of  initiation  delay  time  on  the  separa¬ 
tion  characteristics  at  hypersonic  speeds  and  at  high  dynamic  pressure  for  the  lift¬ 
ing  body  capsule.  With  no  delay  time  the  separation  distance  remains  constant  due 
to  identical  capsule  characteristics.  Increasing  the  delay  time  increases  the  separa¬ 
tion  distance. 

Figure  71  presents  the  effect  of  escape  rocket  thrust  characteristics 
on  separation  distance  for  une  .Lifting  body  capsule  at  high  dynamic  pressure.  These 
results  indicate  that  increasing  the  thrust  level  or  thrust  difference  between  cap¬ 
sules  increases  the  separation  distance. 

Figure  72  presents  the  effect  of  initial  separation  distance  and  es¬ 
cape  rocket  bum  time  on  separation  distance  for  the  lifting  body  capsule  at  high 
dynamic  pressure.  Increasing  the  burning  time  of  one  of  the  escape  rockets  greatly 
increases  the  separation  distance.  Increasing  the  initial  separation  distance 
generally  increases  the  separation  distance.  If  the  aft  capsule  is  released  first 
the  separation  distance  tends  to  increase.  If  the  aft  capsule  is  released  last  the 
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TABLE  11 


PARAMETER  VARIATIONS  TOR  CAPSULE -CAPSULE  SEPARATION  BALLISTIC  BODY  -- 


TABLE  12 


Separation  Distance 
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separation  distance  tends  to  decrease  slightly  after  rocket  burnout.  This  is  a  re¬ 
sult  of  the  high  drag  forces  causing  the  forward  capsule,  which  was  released  first, 
to  drop  back  towards  the  aft  capsule . 

6. 2. 2. 4  Conclusions.  It  can  be  seen  from  the  capsule  -  capsule  separation  data 

discussed  above  that  collision  between  the  two  capsules  is  easier  to  avoid  than 
achieve.  The  easiest  way  to  avoid  collision  appears  to  be  by  adjusting  thrust  load¬ 
ing  and  thrust  angle  so  that  they  are  different  for  the  two  capsules.  The  general 
location  and  sequencing  criteria  will  be  discussed  in  Section  6.2.4. 

6.2.3  SEPARATION  REQUIREMENTS  FROM  EXPLOSIONS.  It  is  generally  the  hazard 

of  explosions  which  places  the  requirement  of  large  separation  distances  in  a  short 
time  on  escape  capsules.  For  this  reason  a  brief  investigation  was  made  of  capsule 
separation  requirements  for  some  typical  explosions. 

6. 2. 3*1  Launch  Vehicle  Characteristics.  Both  HTOL  and  VTOHL  launch  vehicles 

were  considered.  For  both  vehicles  the  propellant  in  each  stage  was  assumed  to  be 
liquid  hydrogen-liquid  oxygen.  In  the  HTOL  only  the  first  stage  propellant  was 
assumed  to  explode  while  in  the  VTOHL  the  total  propellant  was  assumed  to  be  avail¬ 
able.  Explosion  characteristics  were  calculated  using  the  techniques  discussed  in 
Section  4.5  for  the  conditions  given  in  Table  13. 

TA'iLE  13  Launch  Vehicle  Characteristics  for  Explosion  Calculations 

Propellsint  Wt. 


610,000 
427,000 
427,000 
314,000 
1,707,000 

1,255,000  . 

5,130,000  j 

3,770,000 

NOTE:  For  HTOL  propellant  weight  is  first  stage  only 

For  VTOHL  propellant  weight  is  first  and  second  stage 

6. 2. 3. 2  Explosion  Characteristics.  For  this  investigation  it  was  assumed  that  the 
escape  capsule  had  an  overpressure  limit  of  5  psi.  Figure  73  presents  the  time  and 
distance  characteristics  of  the  5  psi  shock  wave  for  the  HTOL  vehicle.  Figure  74 
presents  the  5  psi  shock  wave  characteristics  for  the  VTOHL  vehicles  at  sea  level 
and  40,000  feet.  As  has  been  previously  discussed  it  is  seen  that  the  blast  wave 
propagates  at  a  much  higher  rate  than  human  tolerance  limits  would  allow  an  escape 
capsule  to  accelerate.  It  is  therefore  mandatory  that  an  impending  explosion  be 
detected  prior  to  detonation. 

6. 2. 3. 3  Escape  Requirements.  The  separation  characteristics  described  in  Section 
6.2.1  were  used  in  conjunction  with  the  explosion  characteristics  presented  in 
Figures  73  and  74  to  obtain  the  minimum  warning  time  required  to  escape  without 
encountering  overpressures  greater  than  5  psi. 

I 
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Veh 

icle 

GTOW 

Velocity 

Altitude 

H2  Weight 

02  Weight 

HTC 

L 

1,000,000 

0 

0 

] 02,000 

508,000 

1,800 

27,000 

71,000 

356,000 

VTC 

>HL  -  A 

500,000 

0 

0 

71,000 

356,000 

1,800 

40,000 

52,000 

262,000 

-  3 

2,000,000 

0 

0 

287,000 

1,420,000 

1,800 

40,000 

210,000 

1,04S,000 

-  C 

6,000,000 

0 

0 

860,000 

4,270,000 

1,800 

40,000 

630,000 

3,140,000 

A 
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The  resulting  warning  time  data  la  presented  In  Figures  75  and  76. 
Figure  75  shows  the  effect  of  thrust  loading,  burn  time  and  thrust  angle  on  the 
warning  time  required  for  the  HTOL  vehicle  at  sea  level  and  27,000  feet.  The 
maximum  warning  time  requirements  range  from  approximately  1  to  3  seconds  depend¬ 
ing  upon  conditions.  Figure  presents  the  warning  time  requirements  for  the 
VTOHL  vehicles  as  a  function  of  gross  takeoff  weight,  thrust  loading  and  burn 
time.  As  expected,  increasing  the  vehicle  size  increases  the  warning  time  require¬ 
ments  . 

6.2.4  LOCATION  AND  SEQUENCING  CHARACTERISTICS .  One  of  the  unique  factors 

regarding  crew  escape  for  two  stage  aerospace  vehicles  having  two  separated  crew 
compartments  is  the  significance  of  the  location  of  the  crew  compartments  and  the 
sequencing  of  escape  initiation.  These  are  significant  due  to  the  necessity  of 
avoiding  a  collision. 

Prior  to  examining  these  unique  factors  It  is  significant  to  examine 
those  factors  affecting  crew  compartment  location  in  general.  The  location  of  a 
crew  compartment  in  an  aerospace  vehicle  must  be  viewed  from  the  following  two 
aspects : 


1.  The  crew  compartment  is  the  control  canter  of  the 
vehicle . 

2.  The  crew  compartment  serves  as  the  crew  escape  cap¬ 
sule  . 

Considered  as  the  control  center  of  the  vehicle  it  is  necessary  that 
it  be  located  and  sized  such  that  the  control  function  can  be  carried  out.  Since 
the  vehicles  under  consideration  in  the  present  study  are  manually  flown  at  least 
in  the  return  flight  and  landing,  it  is  required  that  adequate  outside  vision  be 
provided.  Thi;,  dictates  a  crew  compartment  location  relatively  Dear  the  nose  for 
each  stage. 


Considered  as  a  crew  escape  capsule,  the  crew  compartment  should  be 
located  such  that  the  escape  operation  can  be  performed  successfully.  This  implies 
that  the  location  not  produce  serious  aerodynamic  or  structural  interference  effects. 

With  the  types  of  two  stage  vehicles  discussed  in  Section  2,  the  major 
displacement  between  the  two  capsules  will  be  in  the  longitudinal  direction  whether 
the  stage  arrangement  is  tandem  or  parallel.  This  occurs  in  parallel  staged  con¬ 
figurations  since  balance  considerations  generally  dictate  that  the  second  stage 
be  located  such  that  its  center  of  gravity  corresponds  to  that  of  the  first  stage. 
The  separation  characteristics  discussed  in  Section  6.2.2  indicate  that  adequate 
clearance  can  be  obtained  with  initial  displacements  of  50  feet.  By  adjusting 
escape  rocket  thrust  loading  and  thrust  angle,  adequate  clearance  could  be  obtained 
at  even  smaller  initial  displacements. 

An  additional  means  of  assuring  clearance  would  be  adjusting  the  orien¬ 
tation  of  the  separation  plane  and  rocket  thrust  direction  such  that  the  capsules 
separated  at  an  angle  to  the  plane  of  symmetry  of  the  vehicle .  Thi6  scheme  would 
have  the  disadvantage  of  inti'oducing  possible  asymmetric  aerodynamic  and  structural 
interference  effects. 

The  sequencing  should  be  such  that  the  aft  capsule  separates  first. 

This  is  based  on  considerations  other  than  collision  since  thrust  loading  and  thrust 
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Fig.  75  Mini  nun  Explosion  Warning  Tine  Required  for  a  Typical  BIOL  Vehicle 
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direction  characteristics  can  be  eeiiily  adjusted  to  avoid  a  collision.  The  first 
consideration  in  reaching  this  decision  was  the  fact  tha-^  if  the  aft  capsule 
separated  first,  it  would  avoid  thj  problem  of  interference  effects  from  the  first 
stage  separation-  These  interference  effects  could  result  from  the  rocket  exliauBt, 
aerodynamic  flow  field  effects  or  even  debris.  Separation  of  the  aft  capsule  firBt 
is  also  desirable  when  considering  that  the  aft  capsule  is  generally  closer  to  the 
center  of  a  possible  explosion.  A  time  delay  of  0.1  to  0.2  seconds  should  be 
adequate . 


Location  and  sequencing  problems  may  be  introduced  in  the  stage  separa¬ 
tion  phase  when  the  second  6tage  is  located  aft  of  the  firBt  stage.  A  problem  arises 
if  the  separation  trajectory  plane  of  the  first  stage  escape  capsule  is  the  same  as 
or  intersects  the  separation  trajectory  plane  of  the  second  stage.  In  this  situa¬ 
tion  there  is  a  period  of  time  when  the  first  6tage  capsule  should  not  be  ejected 
since  it  would  collide  with  the  second  stage.  The  solution  to  this  problem  is  a 
delay  circuit  in  the  eject  system  of  the  first  stage  capsule  which  prevents  it 
from  ejecting  when  it  might  intersect  the  second  stage.  This  solution  does  have 
the  disadvantage  however  of  introducing  a  dead  region  for  the  first  stage. 

In  analyzing  this  dead  region,  it  is  significant  to  note  the  following 
ground  rd“£  and  criteria  previously  dev? loped- 

1.  The  most  severe  hazard  in  terms  of  onset  rate  and  area 
of  influence  is  an  explosion 

2.  A  warning  time  is  required  to  escape  from  an  explosion 

3.  The  escape  capsule  operates  at  a  much  higher  thrust/ 
weight  tiian  the  second  stage  vehicle 

The  four  possible  situations  which  can  occur  are  presented  schemati¬ 
cally  in  Figure  77* 

In  case  1  the  warning  of  an  impending  explosion  in  stage  2  is  given 
prior  to  physical  separation.  Both  capsules  separate  and  escape  in  a  conventional 
manner. 

In  case  2  the  warning  of  an  impending  explosion  is  given  sufficiently 
ahead  of  the  passage  of  stage  2  over  the  first  stage  capsule  that  a  conventional, 
separation  can  occur.  The  explosion  takes  place  over  or  beyond  the  former  position 
of  the  first  stage  capsule. 

In  case  3  the  warning  occurs  when  the  second  6tage  is  in  such  a  posi¬ 
tion  that  impact  would  occur  if  the  first  stage  was  separated  immediately.  The 
first  stage  capsule  separation  is  delayed  until  passage  of  the  second  stage.  The 
first  suage  capsule  then  separates. 

Case  4  is  a  special  instance  of  case  3-  In  case  4  the  second  stage 
does  not  clear  the  impact  region  in  the  time  period  between  warning  and  explosion. 
The  first  stage  cannot  separate  and  no  escape  is  possible. 

The  possibility  of  case  4  occurring  would  depend  upon  the  acceleration 
characteristics  of  the  second  stage.  The  significance  of  this  case  would  depend 
upon  the  results  of  a  criticality  study  for  any  given  specific  design.  It  must  be 
realized  that  it  is  impossible  to  insure  crew  safety  from  all  possible  malfunctions, 
e.g*,  escape  system  failure.  In  a  given  design  there  is  the  possibility  that  the 
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likelihood  of  case  4  occurring  is  less  than  the  likelihood  of  escape  system 
failure  . 


It  is  noted  that  if  the  separation  trajectory  plane  of  the  second 
stage  does  not  intersect  the  separation  trajectory  of  the  first  stage  capsule, 
there  is  no  problem. 
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CASE  1  -  NORMAL  PROCEDURE 


CASE  2  -  WARNING  -  STAGE  1  SEPARATES  -  EXPLOSION 


CASE  3  -  WARNING  -  STAGE  1  DELAY  -  STAGE  1  SEPARATES  - 


:ASE  k  -  WARNING  -  STAGE  1  DELAY  -  EXPLOSION 


FIGURE  77  -  POSSIBLE  STAGING  SITUATIONS 
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SECTION  7 


CONCLUSIONS  All'  lffiCO>MiK!-ATION3 


CONCLUSIONS 

1.  The  two  stage  manned  recoverable  aerospace  vehicles  under  consideration 
in  the  present,  study  can  be  classified  as  either  vertical  take-off  and 
horizontal  lending  ( YTO.TL  '  or  horizontal  take-off  and  horizontal  land¬ 
ing  (HTOI).  Vlthin  each  of  theBe  classifications  the  stages  can  be 
mounted  in  tandem  or  parallel. 

2.  Lover  mounted  second  stageB  should  no*  be  uBed  on  HTJL  vehicles  due 
to  the  lack  of  second  stage  escape  capability  at  low  altitudes. 

3-  Tue  to  the  nature  of  system  and  misBlo.u  hazards,  escape  capability 
should  be  provided  for  each  stage  at  all  timeB. 

4.  Fully  recoverable  capsules  are  the  escape  concept  offering  the  greatest 
escape  capability  at  a  minimum  penalty  in  weight  and  complexity. 

5-  There  are  no  unique  problems  in  the  area  of  detection,  (defined  aa 
sensors),  resulting  from  the  presence  cf  two  separated  crew  compart¬ 
ments. 

t.  The  fact  that  most  malfunctions  necessitating  crew  escape  have  a 

finite  onset  rate  or  sequence  of  malfunctions  leading  to  the  catastro¬ 
phic  malfunction  leads  to  the  notion  of  warning  time.  In  many  instances 
this  warning  time  is  greater  than  the  minimum  human  reaction  time  which 
means  that  mar.  can  be  introduced  into  escape  warning  and  initiation 
system. 

7.  A  combination  manual/f.utoraatic  escape  warning,  and  initiation  system  is 
recommended  as  the  system  which  provides  the  fast  response  character¬ 
istics  of  a  machine, which  are  necessary  in  certain  cases,  with  the 
flexibility  and  decision  making  capability  of  man. 

8.  The  cockpit  malfunction  status  display  and  emergency  control  console 
becomes  the  significant  item  in  the  manual/automatic  escape  warning 
and  initiation  aye tern.  Similar  units  should  be  provided  in  each  crev 
compartment  such  that  during  first  Btage  boost  the  crew  of  each  stage 
could  monitor  performance.  This  arrangement  brings  the  capabilities 
of  all  the  men  on  board  into  any  emergency  situation. 

9.  The  manual  features  of  the  warning  and  initiation  system  must  be 
backed  up  by  the  automatic  system  for  fast  onset  malfunctions  and 
commanded  ejections  from  the  ground. 

10.  Emergency"  situations  should  be  classified  as  to  degree  of  severity. 

Four  levels  are  recommended;  ABORT  IMMINENT  (naif unction  indicated), 
ABORT  (malfunction  verified),  EJECTION  IMMINENT  and  EJECT. 
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11.  Bo tn  rhe  ground  command  posts  and  the  two  on-board  commanders  will 
have  Jurisdiction  or  authority  over  ejection.  Precedence  or  priority 
of  Jurisdiction  will  vary  during  the  overall  mission.  While  on  the 
ground  precedence  will  generally  be  vested  in  ground  command  posts. 
After  launch  or  start  of  take-off  precedence  will  generally  be  with 
The  pre-selected  on-board  commander.  The  other  on-board  commander 
will  have  precedence  only  at  the  option  of  the  designated  mission 
commander. 

12.  The  crew  compartments  should  be  separated  longitudinally.  By  vary¬ 
ing  escape  rocket  thru6t  o:  thrust  inclination  between  the  two  capeuieB 
there  should  be  no  collision  problem. 

13-  The  aft  capsule  should  separate  first  to  minimize  Th»>  possibility  of 
interference  resulting  from  forward  capsule  ejection  and  since  the 
aft  capsule  is  generally  closer  to  the  center  of  a  possible  explosion. 

14-  .  The  performance  of  each  stage  should  be  monitored  during  the  staging 

maneuver. 

15-  If  the  separation  plane  of  aft  mounted  second  stage  Intersects  the 
separation  plane  of  the  first  stage  escape  capsule  a  delay  circuit  in 
the  first  stage  ejection  system  may  be  necessary  to  prevent,  collision 
between  the  second  stage  and  the  first  stage  escape  capsule. 

.2  KE  C  OifME  ISA  “TONS  FOR  FURTHER  STUDY 

1.  is  an  unlikely  fortunate  os;  simple  design  circumstance  where  the 
escape  system  design  provides  escape  from  all  conceiveatle  hazard 
possibilities.  The  advent  of  practicality  brings  demands  of  proper 
trade-off's,  weight,  space  and  cost,  or  optimizations  of  "values 
received"  for  onboard  systems.  For  example,  the  perachuteless 
commercial  airliner  of  today  does  not  provide  safety  against  all  air 
hazard  possibilities,  if  it  did,  the  airliner  probably  would  not  get 
off  the  ground  .  .  .  accordingly,  information  leading  to  hazard 
probatility  distributions  and  densities  in  addition  to  possibilities 
for  hazard  occurrence  needs  deeper  Investigation  today  -  if  trade-offs 
are  to  show  respectable  sensitivities. 

2.  The  problem  of  realistic  formulation  of  detection  requirements  for 
complicated  missions  can  be  solved  by  using  a  technique  combining 
probability  and  systems  analysis.  Further  study  aimed  at  developing 
such  a  technique  is  recommended. 

3.  Continual  effort  should  be  expected  on  advancing  the  state-of-the-art 
in  sensors. 
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4.  The  capability  of  man  in  regard  to  emergency  situations  should  be 
explored  in  more  depth  with  the  aim  of  more  clearly  defining  the 
•■alfunction  status  and  control  display  for  the  cockpits. 

5.  Explosion  characteristics  of  aerospace  vehicles  should  be  better 
defined  einae,  in  general,  they  impose  the  most  severe  requirements 
on  the  detection  and  warning  system. 
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APPENDIX  1 


A  Note  on  Criti  ality 


Criticality  of  an  item  may  be  defined  aa  the  sensitivity  of  expected  mission  value  to 
the  ith  item  reliability,  that  la, 

ci  '  k  (1) 

where 

V  =  the  expected  mission  value,  and 
Rj_  =  the  ith  item  reliability. 

By  multiplying  both  sides  of  (l)  above  by  ARp, 

ci^i  -  5^ 

If  ARi  is  taken  small  enough,  or  if  it  happens  that  the  interval  of  interest  of 
the  expected  mission  ’^alue  is  a  linear  function  of  Rj,  then  expected  loss,  L^,  under 
general  conditions  of  reliability  degradation, 

Li  =  V  (Ri)  -  V  (Ri  -  ARi)  as  ARi  — 0; 

and  criticality  at  maximum  reliability 

=  V(l)  -  V  (I  -  AR/)  ; 

or  graphically  as  following 


In  the  generation  of  the  malfunction  sequence  tree,  the  notion  of  criticality 
is  most  useful  in  particularizing  and  arranging  top  anl  upper  branches.  From  the 
upper  branches,  each  of  the  known  antecedent  causes  and  their  likely  antecedent  causes 
in  turn  are  arranged  downward  in  the  direction  reverse  of  their  occurrence.  See 
Figure  A-l  following.  The  more  completely  connected  tree  incorporates  related  experi¬ 
ence  data  on  lowest  level  detail  hardware,  i.e.,  part  failure,  effects  and  onset  rates 
in  the  part  application.  The  final  time-oriented  tree  with  the  grouping  of  cues  into 
appropriate  levels  per  earlier  discussions  is  typically  particularized  by  Figure  26  in 
the  report  text. 
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Figure  A-l  Typtcul  Malfunction  Sequence 
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A  Note  on:  A  General  Distribution  of  Waiting  Time  to  Failure  for  a  Non -Homogeneous 
Machine  in  Simple  Death  Processes.  (Mathematically  Describable  Failure 
Process) 

In  this  Appendix  ve  describe  the  hypothetical  XTOHL  vehicle  as  being  in  any  one  of  X, 

a  finite  number,  of  states  at  time  t.  We  let  N  denott  the  absorbing  malfunction, 

i.e.,  the  loos  of  the  vehicle.  We  let  x  =  0,and  x  =  1,  2,  .  .  ,  N-l  denote  no  mal¬ 
function,  and  the  set  of  vehicle  malfunction  3tate6  prior  to  vehicle  loss,  respec¬ 
tively.  We  shall  make  the  at  hand  post-launch  assumption  that  transitions  through 
the  vehicle  state  or  malfunction  state  space  occur  monotonic  only  toward  vehicle  Iobb, 
state  N.  This  means  that  we  assume  no  time  available  fo  malfunction  repair,  and 
repair  is  not  attempted. 

DISCUSSION 

1.  We  may  write  in  probability  terms:  P(X  =  x)  =  P  (state  x) .  We  note  that 
we  shall  re  interested  in 

Px(t)  =  P  (state  x  at  time  t),  generally,  and 

PN(t)  =  P  (state  N  at  time  t),  particularly. 

Also,  we  will  use  the  definition 

Pj.  (t,  t  +  At)  =  P  [(t  <  T  <  t  +  At )/( T  ->  tj]  =  g.;  (t,  t  +  At), 

where  r  is  the  waiting  time  to  vehicle  loss. 

2.  According  to  the  assumptions  foregoing,  then,  the  set  of  vehicle,  or 
perhaps  better,  system  state  transitions  to  vehicle  loss  may  be  diagrammed 
as  follows: 

wher-'  N  is  the  absorbing  malfunction,  veuicie  loss. 

3-  Now  for  the  foregoing  set  of  transitions  ve  observe  the  following  postulates 

for  changes  of  state  in  the  time  space  T  =  -j  >  0 1  : 


System  State: 

Number  of  Changes 

Probability:  Px  (t,  t  +  At) 

x-n 

n  >  2 

Px-n  (*)  °  (At) 

x-1 

a. 

Px-1  W  (?x-l  +  °  'At/) 

X 

0 

Px  ( t )  ( 1  '  7X  At  -  o  ( At ) ) 

where  o  (At)  — 0  as  t-^0  and,  0  <  x  <  N-l. 
At 
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h.  Next,  we  consider  additional  state  transition  postulates  as  follows: 

At  any  time  t,  the  system  being  in  state  x,  there  exists  the  probability 
that  during  (t,  t  +  dt)  the  transition: 

(a)  x— »  N  occurs,  proportional  to  /idt  +  o  (At).; 

(b)  (x  =  0)  ■  — *  N  occurs,  proportional  to  Xdt  +  e  (At). 

Setting  the  initial  conditions  for  the  process  as: 

fx(o)  -  a  x  =  o  j 

*>  o  1  <  x  <  N-i  j  o  <  a  <  l, 

=  l-a  x  =  N  ) 

we  may  diagram  sets  of  system  state  transitions  to  vehicle  Iobs  as 
following: 


6  • 


In  accordance  with  all  preceding  and  setting  yx  =  y  i.e.,  stationary 
for  x  <  N, 

N-I 

Pjj  (t.  t  +  dt)  =  S  P  (t)  jidt  +  0  (dt)  + 
x=0 

F0  (t)  Xdt  +  PN-1  (t)  ydt. 

Dividing  through  by  dt  as  dt  — ♦  0 

N-l 

PN  -  x  po  (t)  +  M  S  Px  (t)  +  yPx.L  (t)  =  gN  (t), 

x=0 

the  probability  density  function  of  waiting  time  to  vehicle  loss. 

To  continue  it  is  necessary  to  determine  Px  (t).  We  observe  in  the 
diagram,  for  x  >  0, 

Px  (t,  t  +  dt)  +  Px(t)  (1-ydt  -  jidt)  +  Px_j_  (t)  ydt  +  o  (dt). 
Transposing  terms  appropriately,  end  using 


px  (t)  =  '  (y  +  M)  px  (t)  +  y  Px_x  (t). 
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More  particularly, 

p{  (t)  +  -  (y  +  m)  pi  (*)  +  y  p0  (t)- 

For  x  «  0,  we  obtain 

PQ  (t,  t  +  At)  »  Pc  (t)  [1  -  yA t  -  fiAt  -  >. at  -  o  (At)], 
p'  (t)  =  -  ly  -  f.  +  X.x  p0  (t). 

Solutions  to  the  above  dilferential  equations  may  be  obtained  by  various 
methods. 

To  continue,  if  we  choose  a  method  of  Laplace  transformation  for  solution 
of  the  differentic!:  equations,  ve  let  Px(s)  =  ^  [Px  (t)  ]. 


Since 


Po  (t)  =  -  (m  +  y  +  X)  P0  (t), 

-  PQ  (0)  +  s  PQ  (s)  =  -  (n  +  y  +  X)  P0  (s), 

8  1*0  (s)  -  a  =  -  (M  +  y  +  X)  PG  (s),  and 

Pc  ( s )  =  a/  [  s  +  (m  +  y  +  X )  ]  . 


Inversion 


P0  (t)  =  a  e 


*(/i  +  y  +  x)t. 


Since 


px  (O  =  -(m  +  y)  px  (*)  +  y)  Fx  (t)  +  y  px-i  (*) 

-  px  (o)  +  s  :?x(s)  =  -(n  +  y)  px  (s)  +  y  px.].(e) 


px(s)  =  y  px-i  (b) 

s  +  (y  +  pi) 


More  particularly,  for  x  =  1, 

P  (S)  =  «  p— ^ - -.a 

1  s  +  (y  +  /x)  [e  +  y  +  mJ 


Accordingly  for  1  <  x  <  N-l, 

Fx(s)  =  - - t2- - rx+i 

[s  +  (y  +  piJ 

Inversion  x  ~  (y  +  m)* 

pjt) .  i22L_! 


I  . 


Since 


fit™  (t)  =  X  Pc(t)  +  n  E  Px  (t)  +  y  P„1  (t), 
x=0 
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The  distribution  function  of  vaiting  times  to  vehicle  loss,  G^(t) 

°N(t)  “  Jo  *N(t)  dt 


N-l  -  yt 


*(u  +  X  +  y)t  ft  ~f*t  i’l~- 

a  y  Jo  e  M  dt  +  Jo  e  Lm  2 


N-1  /  ilt 

v  m  e  ♦ 


N-l  -yt 

Tie},  e  ]at 


/i  +  x  +  y 


,  -(u  -*•  X  +  y)t  *ut 

[l  -  e  ]  +  1-e  Ll  -  P  (N,  yt)  ] 


vhere 


,  ,  1  rt  N-l  -yt  "  (yt !  -yt 

p  (N»  yt)  =(nTI)|  Jo  y  (yt>  e  dt  =  L  e 

1  x=H 


If  ve  are  interested  in  the  corresponding  vehicle  integrity  function,  R(t) 

R(t)  «  1  -  Gjj(t) 

i  -(u  +  X  +  y)t  _  -ut 

=  SLL -  -  [  e  -1J  +  e  [1  -  P  (N,  yt)  ]. 

ji+X+y  ’  '  ' 
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